WordPress Plugin Vulnerabilities
Ultimate Addons for Elementor < 1.24.2 - Registration Bypass
Description
"The Ultimate Addons for Elementor plugin recently patched a vulnerability in version 1.24.2 that allows attackers to create subscriber-level users, even if registration is disabled on a WordPress site." This vulnerability is being used in conjunction with a 0-day vulnerability in Elementor PRO.
Affects Plugins
Fixed in version 1.24.2
References
Classification
Type
BYPASS
Miscellaneous
Submitter
Chloe
Submitter website
Verified
No
Timeline
Publicly Published
2020-05-07 (about 2 years ago)
Added
2020-05-07 (about 2 years ago)
Last Updated
2020-05-18 (about 2 years ago)