CVE Database /
CVE-2022-1329
CVE · High
CVE-2022-1329 — Elementor Website Builder – more than just a page builder [elementor] >= 3.6.0 - <= 3.6.2
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2022-1329
|
Elementor Website Builder – more than just a page builder [elementor] >= 3.6.0 - <= 3.6.2 |
Unrestricted Upload of File with Dangerous Type |
High
8.8
|
3.6.0–3.6.3
|
3.6.3 |
2022-04-13 |
—
|
CVE-2022-1329
The Elementor Website Builder plugin contains a capability verification gap in its onboarding module that permits unauthenticated users to execute AJAX operations without proper authorization checks. This flaw allows attackers to alter website configuration and upload arbitrary files, potentially leading to remote code execution on affected installations running versions 3.6.0 through 3.6.2.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings