Critical Bug Found In WordPress Plugin For Elementor With Over A Million Installations

 

A WordPress plugin with over one million installs has been found to contain a critical vulnerability that could result in the execution of arbitrary code on compromised websites.

The plugin in question is Essential Addons for Elementor, which provides WordPress site owners with a library of over 80 elements and extensions to help design and customize pages and posts.

"This vulnerability allows any user, regardless of their authentication or authorization status, to perform a local file inclusion attack," Patchstack said in a report. "This attack can be used to include local files on the filesystem of the website, such as /etc/passwd. This can also be used to perform RCE by including a file with malicious PHP code that normally cannot be executed."

That said, the vulnerability only exists if widgets like dynamic gallery and product gallery are used, which utilize the vulnerable function, resulting in local file inclusion – an attack technique in which a web application is tricked into exposing or running arbitrary files on the webserver.

The flaw impacts all versions of the addon from 5.0.4 and below, and credited with discovering the vulnerability is researcher Wai Yan Myo Thet. Following responsible disclosure, the security hole was finally plugged in version 5.0.5 released on January 28 "after several insufficient patches."

The development comes weeks after it emerged that unidentified actors tampered with dozens of WordPress themes and plugins hosted on a developer's website to inject a backdoor with the goal of infecting further sites.

Related news

1. Hacking Tools 2020
2. Pentest Tools Website
3. Hacking Tools For Kali Linux
4. Hack Apps
5. Hacking Tools 2020
6. Physical Pentest Tools
7. Pentest Tools Framework
8. Hacking Tools Online
9. Pentest Tools For Windows
10. Hack Tools 2019
11. Hacking Tools For Games
12. Hacker Tools Online
13. Hacking Tools Download
14. Hacking Tools 2019
15. Physical Pentest Tools
16. Hacking Tools Windows
17. Hacker Tools Hardware
18. Hacking Tools Mac
19. Hacker Tools Github
20. Hacker Tools 2019
21. Hacking Tools Download
22. Hacker Hardware Tools
23. Hack Tools Github
24. Beginner Hacker Tools
25. Pentest Tools Nmap
26. Hacking Tools Free Download
27. Pentest Tools Linux
28. Hacking Tools Download
29. Termux Hacking Tools 2019
30. Pentest Reporting Tools
31. Pentest Tools Open Source
32. Pentest Tools Apk
33. Hacking Tools
34. Blackhat Hacker Tools
35. Pentest Tools Kali Linux
36. Hacker Tools 2019
37. Pentest Tools Android
38. Hacking Tools For Games
39. Pentest Tools Url Fuzzer
40. Hacker Tools Linux
41. Hacker
42. Hacker Tools For Windows
43. Hacking Tools For Games
44. Hacker Tools Free Download
45. Hak5 Tools
46. Pentest Tools For Android
47. Hacker Tools Free
48. Hacking Tools Mac
49. Tools Used For Hacking
50. Pentest Tools Windows
51. Pentest Tools Kali Linux
52. Hack Tools For Ubuntu
53. Hacker Tools Windows
54. Hacking Tools Kit
55. Hacker Tools Online
56. Hacker Search Tools
57. Hacking Tools For Kali Linux
58. Hack Tools Github
59. Usb Pentest Tools
60. Hacker Tools For Pc
61. Hacks And Tools
62. Pentest Tools Android
63. Hacking Tools For Pc
64. Hacker Tools For Windows
65. Pentest Tools Windows
66. Hacker Hardware Tools
67. Hacking Tools For Windows 7
68. Nsa Hack Tools
69. Pentest Reporting Tools
70. Hacking Tools For Windows 7
71. Hacking Apps
72. Hacker Tools 2019
73. Hacker
74. Hacker Tools 2020
75. Pentest Tools Subdomain
76. Hacking Tools 2020
77. Pentest Tools Free
78. Hacking Tools For Kali Linux
79. Hacker Tools Free
80. Best Hacking Tools 2019
81. Pentest Tools For Windows
82. Hacker Tools Online
83. Pentest Tools Website
84. Hacker Tools For Windows
85. Top Pentest Tools
86. Hacking Tools For Windows Free Download
87. Hacking Tools For Pc
88. Best Hacking Tools 2020
89. Best Hacking Tools 2020
90. Pentest Tools List
91. Hacking Tools Name
92. Hack Tool Apk No Root
93. Pentest Tools Apk
94. Computer Hacker
95. Hack Tools Github
96. Hack Tool Apk
97. Free Pentest Tools For Windows
98. Hacking Tools For Windows
99. Hack Tools For Mac
100. Hak5 Tools
101. Hacking Tools 2019
102. How To Hack
103. Hackers Toolbox
104. Hacking Tools For Games
105. Black Hat Hacker Tools
106. Hacking Tools Windows
107. How To Install Pentest Tools In Ubuntu
108. Bluetooth Hacking Tools Kali
109. Hack Tools Download
110. How To Hack
111. How To Make Hacking Tools
112. Pentest Tools Alternative
113. Hacker Tools Linux
114. Hacking Tools For Kali Linux
115. Hack Tools Mac
116. Hacker Tools For Ios
117. What Are Hacking Tools
118. Hacking Tools 2019
119. Pentest Tools Framework
120. Hack Tools For Mac
121. Hacker Tools Apk Download
122. Hacking Tools Mac
123. Best Pentesting Tools 2018
124. How To Install Pentest Tools In Ubuntu
125. Hacking Tools For Beginners
126. Hacker Tools For Mac
127. Top Pentest Tools
128. Growth Hacker Tools
129. Hacking Tools Windows
130. Bluetooth Hacking Tools Kali
131. Nsa Hacker Tools
132. Pentest Tools Url Fuzzer
133. Hacking Tools Windows
134. Pentest Tools For Android
135. Hacker Tools Mac
136. World No 1 Hacker Software
137. Termux Hacking Tools 2019
138. Hacker Tools Mac
139. Hacking Tools For Mac
140. Hackers Toolbox
141. Underground Hacker Sites
142. Pentest Tools For Ubuntu
143. Free Pentest Tools For Windows
144. Pentest Tools Github
145. Hack Rom Tools