Master Addons For Elementor Elementor Addons Widgets Mega Menu Builder Popup Builder Widget Builder Template Kits
Monthly
Arbitrary file upload in Master Addons for Elementor (all versions through 3.1.9) enables WordPress users with editor-level access to achieve remote code execution by exploiting a misconfigured AJAX authorization check. The upload_template_kit() handler incorrectly enforces only the upload_files capability-held by editors by default-rather than the manage_options capability required by every sibling handler, and performs no file-type filtering on content extracted from uploaded ZIP archives, allowing PHP webshells and other executable files to land on the server. No CISA KEV listing or public exploit code has been identified at time of analysis, but the low attack complexity and clear code-level proof in the plugin SVN repository make this a high-priority remediation for any multi-user WordPress site running Elementor.
Arbitrary file upload in Master Addons for Elementor (all versions through 3.1.9) enables WordPress users with editor-level access to achieve remote code execution by exploiting a misconfigured AJAX authorization check. The upload_template_kit() handler incorrectly enforces only the upload_files capability-held by editors by default-rather than the manage_options capability required by every sibling handler, and performs no file-type filtering on content extracted from uploaded ZIP archives, allowing PHP webshells and other executable files to land on the server. No CISA KEV listing or public exploit code has been identified at time of analysis, but the low attack complexity and clear code-level proof in the plugin SVN repository make this a high-priority remediation for any multi-user WordPress site running Elementor.