CVE Database /
CVE-2023-39157
CVE · Critical
CVE-2023-39157 — JetElements For Elementor [jet-elements] < 2.6.11
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-39157
|
JetElements For Elementor [jet-elements] < 2.6.11 |
Improper Control of Generation of Code ('Code Injection') |
Critical
9.0
|
< 2.6.11
|
2.6.11 |
2023-08-03 |
—
|
CVE-2023-39157
The JetElements For Elementor plugin before version 2.6.11 contains a remote code execution flaw that enables attackers to run arbitrary commands on affected websites. An attacker could leverage this vulnerability to establish persistent backdoor access and seize complete control of the site. The issue was identified by Rafie Muhammad and has been resolved in version 2.6.11 and later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings