CVE-2023-32243

Опубликовано: 12 мая 2023

Источник: nvd

CVSS3: 9.8

EPSS Критический

Описание

Improper Authentication vulnerability in WPDeveloper Essential Addons for Elementor allows Privilege Escalation. This issue affects Essential Addons for Elementor: from 5.4.0 through 5.7.1.

Ссылки

http://packetstormsecurity.com/files/172457/WordPress-Elementor-Lite-5.7.1-Arbitrary-Password-Reset.html
Exploit
Third Party Advisory
VDB Entry
https://patchstack.com/articles/critical-privilege-escalation-in-essential-addons-for-elementor-plugin-affecting-1-million-sites?_s_id=cve
Exploit
Third Party Advisory
https://patchstack.com/database/vulnerability/essential-addons-for-elementor-lite/wordpress-essential-addons-for-elementor-plugin-5-4-0-5-7-1-unauthenticated-privilege-escalation-vulnerability?_s_id=cve
Third Party Advisory
http://packetstormsecurity.com/files/172457/WordPress-Elementor-Lite-5.7.1-Arbitrary-Password-Reset.html
Exploit
Third Party Advisory
VDB Entry
https://patchstack.com/articles/critical-privilege-escalation-in-essential-addons-for-elementor-plugin-affecting-1-million-sites?_s_id=cve
Exploit
Third Party Advisory
https://patchstack.com/database/vulnerability/essential-addons-for-elementor-lite/wordpress-essential-addons-for-elementor-plugin-5-4-0-5-7-1-unauthenticated-privilege-escalation-vulnerability?_s_id=cve
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:wpdeveloper:essential_addons_for_elementor:*:*:*:*:*:wordpress:*:*

Версия от 5.4.0 (включая) до 5.7.1 (исключая)

EPSS

Процентиль: 100%

0.93542

Критический

9.8 Critical

CVSS3

Дефекты

CWE-287

Связанные уязвимости

GHSA-4xm5-cg4q-prrp

CVSS3: 9.8

github

больше 2 лет назад

Improper Authentication vulnerability in WPDeveloper Essential Addons for Elementor allows Privilege Escalation. This issue affects Essential Addons for Elementor: from 5.4.0 through 5.7.1.

BDU:2023-03088

CVSS3: 9.8

fstec

больше 2 лет назад

Уязвимость плагина Essential Addons для Elementor системы управления содержимым сайта WordPress, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 100%

0.93542

Критический

9.8 Critical

CVSS3

Дефекты

CWE-287