CVE-2023-31231 — Unlimited Elements For Elementor [unlimited-elements-for-elementor] < 1.5.66

CVE	Vulnerability	Type	Severity	Affected	Fixed in	Published	Status
CVE-2023-31231	Unlimited Elements For Elementor [unlimited-elements-for-elementor] < 1.5.66	Unrestricted Upload of File with Dangerous Type	Critical 9.9	< 1.5.66	1.5.66	2023-06-20	—

CVE-2023-31231

Update the WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin to the latest available version (at least 1.5.66). Rafie Muhammad (Patchstack) discovered and reported this Arbitrary File Upload vulnerability in WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Plugin. This could allow a malicious actor to upload any type of file to your website. This can include backdoors which are then executed to gain further access to your website. This vulnerability has been fixed in version 1.5.66.

Source: Patchstack

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)