CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The Elastic Theme Editor plugin for WordPress is vulnerable to arbitrary file uploads due to a dynamic code generation feature in the process_theme function in all versions up to, and including, 0.0.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.
Explanation of Vulnerability in Simple Terms
The Elastic Theme Editor contains a code injection vulnerability that allows authenticated users with low privileges to execute arbitrary PHP code on the site. An attacker can inject malicious code through the theme editor interface, gaining full control over site data and functionality. All versions up to 0.0.3 are affected. Update immediately to a patched version.
What an attacker can do
Run arbitrary PHP code on the site and access all data, modify content, or disable the site.
Potential impact on your site
Compromised site with potential data theft, malware injection, or complete takeover if an attacker gains low-privilege access.
Conditions required to exploit
Attacker must have a low-privilege user account (e.g., contributor or editor role) and network access.
Key dates
External resources
