Royal Elementor Addons and Templates, CVE-2023-5360

CVE, Research URL: CVE-2023-5360
Home page URL: Security reports for Royal Elementor Addons and Templates
Application: Royal Elementor Addons and Templates
Published on: Oct 31, 2023
Research Description: The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE.
Affected versions: Min -, max 1.3.79.
Status: vulnerable