CVE-2023-3295

Summary

CVE-2023-3295 is a vulnerability affecting the Unlimited Elements For Elementor plugin for WordPress. It allows authenticated attackers with contributor-level permissions and above to upload arbitrary files, bypassing missing file type validation in the file manager functionality. Versions up to and including 1.5.66 are vulnerable, potentially enabling remote code execution. This issue was partially addressed in version 1.5.66 and fully resolved in version 1.5.67. Notably, CVE-2023-31231 shares similarities with this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.