Critical Bug Found In WordPress Plugin For Elementor With Over A Million Installations

 

A WordPress plugin with over one million installs has been found to contain a critical vulnerability that could result in the execution of arbitrary code on compromised websites.

The plugin in question is Essential Addons for Elementor, which provides WordPress site owners with a library of over 80 elements and extensions to help design and customize pages and posts.

"This vulnerability allows any user, regardless of their authentication or authorization status, to perform a local file inclusion attack," Patchstack said in a report. "This attack can be used to include local files on the filesystem of the website, such as /etc/passwd. This can also be used to perform RCE by including a file with malicious PHP code that normally cannot be executed."

That said, the vulnerability only exists if widgets like dynamic gallery and product gallery are used, which utilize the vulnerable function, resulting in local file inclusion – an attack technique in which a web application is tricked into exposing or running arbitrary files on the webserver.

The flaw impacts all versions of the addon from 5.0.4 and below, and credited with discovering the vulnerability is researcher Wai Yan Myo Thet. Following responsible disclosure, the security hole was finally plugged in version 5.0.5 released on January 28 "after several insufficient patches."

The development comes weeks after it emerged that unidentified actors tampered with dozens of WordPress themes and plugins hosted on a developer's website to inject a backdoor with the goal of infecting further sites.

Continue reading

1. Hacker Tools For Ios
2. Hacking Tools For Kali Linux
3. Hacker Tools Software
4. Pentest Tools Review
5. Pentest Tools Website
6. Pentest Automation Tools
7. Best Hacking Tools 2020
8. Hacker Security Tools
9. Hacking Tools Windows 10
10. Pentest Tools Kali Linux
11. Hacker Tools Linux
12. Hacking App
13. Termux Hacking Tools 2019
14. Tools For Hacker
15. Hackrf Tools
16. Hack Tools Download
17. Hacker Tools Linux
18. Pentest Tools Open Source
19. Pentest Tools Framework
20. Pentest Tools Url Fuzzer
21. Hacks And Tools
22. Hacking Tools For Pc
23. Blackhat Hacker Tools
24. Hack Tools For Mac
25. Nsa Hack Tools
26. Nsa Hack Tools Download
27. Hacker Tools 2020
28. Pentest Recon Tools
29. How To Install Pentest Tools In Ubuntu
30. World No 1 Hacker Software
31. Termux Hacking Tools 2019
32. Ethical Hacker Tools
33. Hacking Tools For Windows 7
34. Blackhat Hacker Tools
35. Hacker Tools For Ios
36. Hacker Tools List
37. Hacker Tools Software
38. Hack Website Online Tool
39. Best Hacking Tools 2019
40. Hack Apps
41. Hacking Tools For Games
42. Hacker Tools Software
43. Hack Website Online Tool
44. Install Pentest Tools Ubuntu
45. Hacker Tool Kit
46. Hack Tools Pc
47. Hacker Tools For Windows
48. Pentest Tools Subdomain
49. Android Hack Tools Github
50. Physical Pentest Tools
51. Pentest Tools Subdomain
52. Hack Tools Github
53. Hack Tools
54. Hack Tools For Games
55. Hacker Tools Windows
56. Hack Website Online Tool
57. Usb Pentest Tools
58. Hack Tools 2019
59. Android Hack Tools Github
60. Bluetooth Hacking Tools Kali
61. Pentest Tools Android
62. Hacking Tools 2019
63. Hacker Tools Github
64. Tools For Hacker
65. Hacker Tools Online
66. Pentest Box Tools Download
67. Hacking Tools
68. Hack Tools For Mac
69. New Hacker Tools
70. Usb Pentest Tools
71. Hack Tool Apk
72. Pentest Tools Windows
73. Hacking Tools 2019
74. Hack Tool Apk No Root
75. Hacker Tools Free Download
76. Hacker Tools 2019
77. Hacker Hardware Tools
78. Pentest Tools Port Scanner
79. Nsa Hack Tools
80. Hack Apps
81. Beginner Hacker Tools
82. Hacker Tools Apk Download
83. Hak5 Tools
84. Hack Tools For Ubuntu
85. Easy Hack Tools
86. Hack Website Online Tool
87. Wifi Hacker Tools For Windows
88. Best Hacking Tools 2019
89. How To Make Hacking Tools
90. Kik Hack Tools
91. Hacking Tools Windows 10
92. Hacking Tools Mac
93. Android Hack Tools Github
94. Hack Tools For Games
95. Pentest Tools Website Vulnerability
96. Hack And Tools
97. Hack Tools Mac
98. Hacker Tools Online
99. Tools Used For Hacking
100. Hacking Tools For Windows
101. Pentest Tools Apk
102. Computer Hacker
103. Pentest Tools Alternative
104. Hack Tools For Ubuntu
105. Hacking App
106. Beginner Hacker Tools
107. Tools For Hacker
108. Blackhat Hacker Tools
109. Hacker Tools
110. Hack Tools For Windows
111. Pentest Recon Tools
112. New Hack Tools
113. Pentest Tools For Mac
114. Pentest Tools For Ubuntu
115. Hacking Tools Software
116. Beginner Hacker Tools
117. Pentest Tools Website
118. Hacker Tools Hardware
119. Hack Tool Apk No Root
120. Pentest Tools For Android
121. Hacker Tools Software
122. Hack Tools
123. Pentest Box Tools Download
124. Pentest Recon Tools
125. Hacker Tools For Mac
126. Bluetooth Hacking Tools Kali
127. Computer Hacker
128. Hackers Toolbox
129. Hack Tools Download
130. Hack Tools Download
131. Hacker Tools For Ios
132. Hacker Tools List
133. Hack Tools For Windows
134. Hacker Tools Online
135. Hacking Tools For Windows 7
136. Pentest Box Tools Download
137. Pentest Tools For Windows
138. Hacking Apps
139. Pentest Tools Github
140. Hacker Tools Free
141. Hacking Tools
142. Pentest Tools List
143. Hack Tools
144. Hack Tools
145. Hacker Tools 2020
146. Computer Hacker
147. Growth Hacker Tools
148. Best Hacking Tools 2019
149. Growth Hacker Tools
150. Best Hacking Tools 2020
151. Hacker Tools 2020