Description
WordPress plugin Royal Elementor Addons是最通用、直观且易于使用的热门页面构建器扩展。 WordPress plugin Royal Elementor Addons中存在任意文件上传漏洞。恶意攻击者可上传webshell获取服务器权限。
WordPress 插件 Royal Elementor Addons /wp-admin/admin-ajax.php 文件上传漏洞 （CVE-2023-5360）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://wpscan.com/vulnerability/c2cf5fd1-663d-4bc1-adcd-e6064eb32ece/
https://github.com/Chocapikk/CVE-2023-5360
https://www.wordfence.com/blog/2023/10/psa-critical-unauthenticated-arbitrary-file-upload-vulnerability-in-royal-elementor-addons-and-templates-being-actively-exploited/
https://nvd.nist.gov/vuln/detail/CVE-2023-5360
https://www.exploit-db.com/exploits/52127
https://www.zero-day.cz/database/828/
https://upadhyayraj.medium.com/cve-2023-5360-royal-elementor-addons-d9a0e95b657f
https://cve.imfht.com/poc_detail/2b04cbce1d12a3193ad7688b123c4fa1665e91b2
https://www.suse.com/security/cve/CVE-2023-5360.html