CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ajax_import_options() function in all versions up to, and including, 7.11.4. This makes it possible for authenticated attackers, with contributor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.
Explanation of Vulnerability in Simple Terms
Avada, a popular WordPress page builder and theme, contains an unrestricted file upload vulnerability in versions up to 7.11.4. An authenticated user with low privileges can upload arbitrary files to the server without proper validation. This allows attackers to upload malicious code, potentially gaining control of the website. Site owners should update immediately to a version newer than 7.11.4.
What an attacker can do
Upload arbitrary files to the server and execute malicious code on the website.
Potential impact on your site
Attackers with basic user accounts can compromise your entire site by uploading and executing malicious code.
Conditions required to exploit
Attacker must have a low-privilege WordPress user account (e.g., subscriber or contributor role).
Key dates
External resources
Related vulnerabilities
