CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The Elementor Website Builder plugin for WordPress is vulnerable to unauthorized execution of several AJAX actions due to a missing capability check in the ~/core/app/modules/onboarding/module.php file that make it possible for attackers to modify site data in addition to uploading malicious files that can be used to obtain remote code execution, in versions 3.6.0 to 3.6.2.
Explanation of Vulnerability in Simple Terms
Elementor Website Builder versions 3.6.0 and later lack proper authorization checks, allowing authenticated users with low privileges to perform actions restricted to higher-privilege roles. An attacker with a basic user account can read, modify, or delete sensitive site data and functionality without proper permission validation. This affects confidentiality, integrity, and availability of the site.
What an attacker can do
Read, modify, or delete site data and functionality without proper authorization.
Potential impact on your site
Low-privilege users can access and modify content and settings they should not be able to reach.
Conditions required to exploit
Attacker must have a low-privilege authenticated account on the site.
Key dates
External resources
Related vulnerabilities
