Description
WordPress Royal Elementor Addons Plugin 任意文件上传漏洞
WordPress Royal Elementor Addons Plugin 任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.wordfence.com/blog/2023/10/psa-critical-unauthenticated-arbitrary-file-upload-vulnerability-in-royal-elementor-addons-and-templates-being-actively-exploited/
https://wpscan.com/blog/unauthenticated-file-upload-vulnerability-addressed-in-royal-elementor-addons-and-templates-1-3-79/
https://nvd.nist.gov/vuln/detail/CVE-2023-5360
https://github.com/Chocapikk/CVE-2023-5360
https://www.exploit-db.com/exploits/52127
https://avd.aliyun.com/detail?id=AVD-2023-5360
https://www.anquanke.com/post/id/290796
https://patchstack.com/database/wordpress/plugin/royal-elementor-addons/vulnerability/wordpress-royal-elementor-addons-and-templates-plugin-1-3-78-unauthenticated-arbitrary-file-upload-vulnerability
https://packetstormsecurity.com/files/175992/WordPress-Royal-Elementor-Addons-And-Templates-Remote-Shell-Upload.html