by Kastro
Paper/Archive/CVE-2023-31231

CVE-2023-31231

Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) — WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Plugin <= 1.5.65 is vulnerable to Arbitrary File Upload

EPSS 0.7%CVSS 9.9
critical.is priorityof 100
40
CVSS 9.9 (CNA)9.9 / 10 × 3029.7Not in CISA KEV+300.0EPSS percentile 51.2.512 × 2010.2No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates).This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 1.5.65.

Affected

ProductAffectedFixed inSource
Unlimited Elements For Elementor (Free Widgets, Addons, Templates)n/a – 1.5.65–CNA

Scores by source

Patchstack (CNA)9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References

refpatchstack.com/database/vulnerability/unlimited-elements-for-elementor/wordpress-unlimited-elements-for-elementor-plugin-1-5-65-arbitrary-file-upload-vulnerability?_s_id=cve