Description
WordPress Plugin Elementor Website Builder is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently upload SVG files even if not allowed. WordPress Plugin Elementor Website Builder version 3.0.13 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 3.0.14 or latest
References
Related Vulnerabilities
Oracle JRE CVE-2022-21366 Vulnerability (CVE-2022-21366)
Atlassian Jira Improper Authentication Vulnerability (CVE-2019-8443)
WordPress Plugin DELUCKS SEO Cross-Site Scripting (2.1.7)
WordPress Plugin Contact Form by Supsystic Cross-Site Scripting (1.7.14)
WordPress Plugin WordPress File Upload Multiple Vulnerabilities (2.7.6)