Security Advisory

CVE-2020-13126

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-05-17 00:38:37

Last updated 2024-08-04 12:11:19

Assigner mitre

CVSS score 9.9

State PUBLISHED

Description

An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13125. An attacker with the Subscriber role can upload arbitrary executable files to achieve remote code execution. NOTE: the free Elementor plugin is unaffected.

← Browse all CVEs View on cve.org ↗