漏洞描述 WordPress plugin Royal Elementor Addons是最通用、直观且易于使用的热门页面构建器扩展。 WordPress plugin Royal Elementor Addons中存在任意文件上传漏洞。恶意攻击者可上传webshell获取服务器权限。
相关漏洞推荐 GLPI /index.php/ajax/ SQL 注入漏洞(CVE-2025-24799) 用友 U8 CRM /ajax/getsrvtemplate.php/getproductdata SQL 注入漏洞 POC CVE-2017-14725: WordPress < 4.8.2 - Authenticated Open Redirect POC CVE-2017-17092: WordPress < 4.9.1 - Authenticated JavaScript File Upload POC wp-security-hidden-login-exposure: WordPress All-in-One Security <=4.4.1 - Hidden Login Page Exposure WordPress Kognetiks Chatbot for WordPress <= 2.0.0 任意文件上传漏洞 WordPress Verbalize WP 存在任意文件上传漏洞(CVE-2024-49668) POC CVE-2021-4374: WordPress Automatic Plugin - Unauthenticated Options Change POC CVE-2025-11749: WordPress AI Engine Plugin - Token Exposure 金华迪加 ajax_act_set_bgmusic.php SQL 注入漏洞 微信公众平台无限回调系统 /user/ajax.php SQL 注入漏洞 WordPress WooCommerce Designer Pro 插件 /wp-admin/admin-ajax.php wcdp_save_canvas_design_ajax 文件上传漏洞(CVE-2025-6440) POC CVE-2025-4302: Stop User Enumeration WordPress plugin - Authentication Bypass