Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload
82Vexday Risk Score
Corrige ahora. Ella explotación observada por VulnCheck y tiene exploit funcional público.
ssvc Actepss 82%
de la publicación al arma0 días
Publicada en NVD31 oct
1ª PoC21 oct
metasploit+23d
VulnCheck13 oct
probabilidad de explotación
82%top 1% de las CVE
explotación observada
síVulnCheck
20 exploit(s) público(s)
The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE.
Productos afectados
Unknown · Royal Elementor Addons and TemplatesPoCs públicas encontradas — 20
exploitdbwww.exploit-db.com/exploits/52127no verificadogithubgithub.com/phankz/Worpress-CVE-2023-5360★ 13githubgithub.com/Chocapikk/CVE-2023-5360★ 10githubgithub.com/Pushkarup/CVE-2023-5360★ 5githubgithub.com/sagsooz/CVE-2023-5360★ 3githubgithub.com/X3RX3SSec/CVE-2023-5360★ 1githubgithub.com/LaviruDilshan/CVE-2023-5360-exploit-with-native-libraries★ 0githubgithub.com/nastar-id/CVE-2023-5360★ 0githubgithub.com/Jenderal92/WP-CVE-2023-5360★ 0vulncheckvulncheck.com/xdb/02aef186ffa5no verificadovulncheckvulncheck.com/xdb/394fa472c607no verificadovulncheckvulncheck.com/xdb/b885c413bd7cno verificadocve_referencepacketstormsecurity.com/files/175992/WordPress-Royal-Elementor-Addons-And-Templates-Remote-Shell-Upload.htmlno verificadovulncheckvulncheck.com/xdb/ec5672b9bf5cno verificadovulncheckvulncheck.com/xdb/6ab829bee65bno verificadovulncheckvulncheck.com/xdb/9bd2b9fa6250no verificadovulncheckvulncheck.com/xdb/7736bb205435no verificadovulncheckvulncheck.com/xdb/3b8353033262no verificadocve_referencewpscan.com/vulnerability/281518ff-7816-4007-b712-63aed7828b34no verificadovulncheckvulncheck.com/xdb/6a17dc0332bcno verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.