Critical severity9.8NVD Advisory· Published Oct 31, 2023· Updated Jun 17, 2026

CVE-2023-5360

Description

The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Royal Elementor Addons/Royal Elementor Addons
cpe:2.3:a:royal-elementor-addons:royal_elementor_addons:*:*:*:*:*:wordpress:*:*
Range: <1.3.79
WordPress/Royal Elementor Addonscpe-rescue
Package: https://wordpress.org/plugins/royal-elementor-addons
WordPress/Royal Elementor Addons and Templatesllm-fuzzy
Range: <1.3.79

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/281518ff-7816-4007-b712-63aed7828b34nvdExploitThird Party Advisory
packetstormsecurity.com/files/175992/WordPress-Royal-Elementor-Addons-And-Templates-Remote-Shell-Upload.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.065
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000