Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-26596

The Dynamic OOO widget for the Elementor Pro plugin through 3.0.5 for WordPress allows remote authenticated users to execute arbitrary code because only the Editor role is needed to upload executable PHP code via the PHP Raw snippet. NOTE: this issue can be mitigated by removing the Dynamic OOO widget or by restricting availability of the Editor role.

Published

2020-10-07T16:15:17.343

Last Modified

2024-11-21T05:20:07.447

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: LOW
Authentication: SINGLE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

8.0

Impact Score

10.0

Weaknesses

Type: Primary
CWE-269

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	elementor	elementor_pro	≤ 3.0.5	Yes
Application	wordpress	wordpress	≤ 5.5.1	No

References

https://elementor.com/pro/changelog/ Release Notes, Vendor Advisory ([email protected])
https://ww2.compunet.cl/dia-cero-en-plugin-de-wordpres-detectada-compunet-redteam/ Exploit, Third Party Advisory ([email protected])
https://elementor.com/pro/changelog/ Release Notes, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://ww2.compunet.cl/dia-cero-en-plugin-de-wordpres-detectada-compunet-redteam/ Exploit, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)