Unrated severityNVD Advisory· Published Oct 31, 2023· Updated Feb 13, 2025

Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload

CVE-2023-5360

Description

The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Royal Elementor Addonscpe-rescue
Package: https://wordpress.org/plugins/royal-elementor-addons
WordPress/Royal Elementor Addons and Templatesllm-fuzzy
Range: <1.3.79

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/281518ff-7816-4007-b712-63aed7828b34mitreexploitvdb-entrytechnical-description
packetstormsecurity.com/files/175992/WordPress-Royal-Elementor-Addons-And-Templates-Remote-Shell-Upload.htmlmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.065
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000