Critical Unauthenticated File Upload to RCE in Elementor Pro Plugin
Elementor Pro WordPress plugin has an unauthenticated arbitrary file upload flaw in its Forms module allowing remote code execution.
Patchstack disclosed a critical unauthenticated arbitrary file upload vulnerability in the Elementor Pro WordPress plugin that can lead to remote code execution. The flaw is in the Forms module's File Upload field, where the extension check and the file-move step run in two separate loops with inconsistent handling of empty file entries. The writeup describes exploitation via crafted upload submissions; no CVE id or evidence of in-the-wild exploitation is given in the post.
- Unauthenticated file upload leads to RCE in Elementor Pro
- Bug sits in Forms module File Upload field logic
- Separate loops mishandle empty file entries
- Elementor Pro is a widely deployed WordPress plugin
- Vendors
- Patchstack
- Products
- Elementor ProWordPress
- Organizations
- Elementor
From the original article
This blog post is about an unauthenticated arbitrary file upload vulnerability in the Elementor Pro plugin that leads to remote code execution. The flaw lives in the Forms module’s File Upload field, where the extension check and the file-move step run in two separate loops with different handling of empty file entries. By submitting two […]
patchstack.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.