Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in The Plus Addons for Elementor Page Builder 5.2.8

  • Severity: critical
  • Status: Fixed
  • Publication: October 31, 2023

The Plus Addons for Elementor Page Builder plugin for WordPress has a vulnerability that allows attackers to include and execute files on the server without authentication. This vulnerability affects all versions of the plugin up to and including 5.2.8. With this vulnerability, attackers can bypass security measures, access sensitive information, or execute any code in the files they upload. This is possible even when only uploading images or other “safe” file types.

Detected in:

The Plus Addons for Elementor fixed vulnerable versions:
The Plus Addons for Elementor Page Builder Pro fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.