CVE Database /
CVE-2023-31090
CVE · Critical
CVE-2023-31090 — Unlimited Elements For Elementor [unlimited-elements-for-elementor] < 1.5.61
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-31090
|
Unlimited Elements For Elementor [unlimited-elements-for-elementor] < 1.5.61 |
Unrestricted Upload of File with Dangerous Type |
Critical
9.9
|
< 1.5.61
|
1.5.61 |
2023-05-22 |
—
|
CVE-2023-31090
The File Manager feature in Unlimited Elements For Elementor up through version 1.5.60 fails to properly validate file types when processing contents of zip archives, enabling authenticated users with contributor access or higher to upload malicious files to the server and potentially achieve remote code execution.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings