CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Upload a Web Shell to a Web Server.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 1.5.60.
Explanation of Vulnerability in Simple Terms
Unlimited Elements For Elementor allows authenticated users with low privileges to upload files without proper validation. An attacker can upload malicious files—including PHP code—to execute arbitrary commands on the site. The vulnerability affects all versions up to 1.5.60 and impacts confidentiality, integrity, and availability of the entire site.
What an attacker can do
Upload and execute malicious files, including PHP code, to run commands on the site.
Potential impact on your site
Complete compromise of the site: attackers can steal data, modify content, install backdoors, or take the site offline.
Conditions required to exploit
Attacker must have a low-privilege user account (e.g., subscriber or contributor role).
Key dates
External resources
Related vulnerabilities
