Description
Unrestricted Upload of File with Dangerous Type vulnerability in Elementor.Com Elementor Website Builder.This issue affects Elementor Website Builder: from 3.3.0 through 3.18.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Elementor.com | Elementor Website Builder | 3.3.0 – ≤ 3.18.1 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 1 repository
-
AkuCyberSec/Elementor-3.18.0-Upload-Path-Traversal-RCE-CVE-2023-48777 ★ 10 · Feb 16, 2024
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- WordPress Elementor 3.18.1 - File Upload/Remote Code Execution http/cves/2023/CVE-2023-48777.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.