PT-2024-35756 · WordPress · The Elements For Elementor
Matthew Rollings
+1
·
Published
2024-06-01
·
Updated
2024-06-03
·
CVE-2024-5348
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
The Elements For Elementor plugin for WordPress versions up to, and including, 2.1
Description
The issue allows authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server via specific attributes of various widgets, including
beforeafter layout, eventsgrid layout, marquee layout, postgrid layout, woocart layout, and woogrid layout. This enables the execution of any PHP code in those files, potentially bypassing access controls, obtaining sensitive data, or achieving code execution, especially in cases where images and other “safe” file types can be uploaded and included.Recommendations
For versions up to, and including, 2.1, consider disabling the affected widgets, specifically those using the
beforeafter layout, eventsgrid layout, marquee layout, postgrid layout, woocart layout, and woogrid layout attributes, until a patch is available. Restrict access to these widgets to minimize the risk of exploitation. Avoid using these attributes in the affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability. Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
The Elements For Elementor