Description
WordPress Plugin Elementor Website Builder is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently upload SVG files even if not allowed. WordPress Plugin Elementor Website Builder version 3.0.13 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 3.0.14 or latest
References
Related Vulnerabilities
WordPress Plugin Contextual Related Posts Cross-Site Scripting (3.3.0)
WordPress Plugin Internal Links Manager Multiple Cross-Site Scripting Vulnerabilities (2.1.0)
WordPress Plugin WP Private Messages SQL Injection (1.0.1)
LimeSurvey Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2021-44967)