Critical Bug Found In WordPress Plugin For Elementor With Over A Million Installations

 

A WordPress plugin with over one million installs has been found to contain a critical vulnerability that could result in the execution of arbitrary code on compromised websites.

The plugin in question is Essential Addons for Elementor, which provides WordPress site owners with a library of over 80 elements and extensions to help design and customize pages and posts.

"This vulnerability allows any user, regardless of their authentication or authorization status, to perform a local file inclusion attack," Patchstack said in a report. "This attack can be used to include local files on the filesystem of the website, such as /etc/passwd. This can also be used to perform RCE by including a file with malicious PHP code that normally cannot be executed."

That said, the vulnerability only exists if widgets like dynamic gallery and product gallery are used, which utilize the vulnerable function, resulting in local file inclusion – an attack technique in which a web application is tricked into exposing or running arbitrary files on the webserver.

The flaw impacts all versions of the addon from 5.0.4 and below, and credited with discovering the vulnerability is researcher Wai Yan Myo Thet. Following responsible disclosure, the security hole was finally plugged in version 5.0.5 released on January 28 "after several insufficient patches."

The development comes weeks after it emerged that unidentified actors tampered with dozens of WordPress themes and plugins hosted on a developer's website to inject a backdoor with the goal of infecting further sites.

Continue reading

1. Nsa Hacker Tools
2. Hack Tools 2019
3. Pentest Tools For Android
4. Tools 4 Hack
5. Hack Tools For Games
6. Hacking Tools Windows 10
7. Best Pentesting Tools 2018
8. Pentest Tools Download
9. Pentest Tools Review
10. Hacker Tools Hardware
11. Pentest Tools Website Vulnerability
12. Hacking Tools For Mac
13. Hack Tools Download
14. Hacker Hardware Tools
15. Hacking Tools For Beginners
16. Pentest Tools Alternative
17. Hacker Tools For Ios
18. New Hacker Tools
19. Hacking Tools Hardware
20. Hacker Tools Windows
21. Kik Hack Tools
22. Nsa Hack Tools
23. New Hacker Tools
24. Pentest Automation Tools
25. Blackhat Hacker Tools
26. Pentest Tools Windows
27. Tools For Hacker
28. Hacking Tools Kit
29. Hacker Security Tools
30. Pentest Tools For Ubuntu
31. Pentest Tools Download
32. Hackrf Tools
33. Hacking Apps
34. Hacking Tools For Games
35. Hacking Tools 2019
36. How To Hack
37. Nsa Hack Tools Download
38. Hacker Tools Software
39. Hack Tools
40. Tools 4 Hack
41. Pentest Tools
42. Pentest Tools Android
43. Hacker Tools List
44. Hack Tools Github
45. Hacking App
46. Hacking Tools For Mac
47. Pentest Tools Port Scanner
48. Hacker Tools Hardware
49. Hacking Tools
50. Hacker
51. Pentest Tools Port Scanner
52. Beginner Hacker Tools
53. New Hack Tools
54. Best Pentesting Tools 2018
55. What Are Hacking Tools
56. Pentest Tools Online
57. Hackers Toolbox
58. Pentest Recon Tools
59. Pentest Tools Apk
60. Pentest Tools Github
61. Underground Hacker Sites
62. Pentest Automation Tools
63. Hack Tools Github
64. Pentest Tools Website Vulnerability
65. Hacker Tools Apk Download
66. Hacking Tools Name
67. Hacker Tools Mac
68. Hacker Tools Linux
69. Hacking Tools Name
70. Pentest Tools Port Scanner
71. Pentest Tools Kali Linux
72. Hacker Tools Free
73. Hacker Tools List
74. Pentest Tools List
75. Hacking Tools 2019
76. Hacker Tools For Windows
77. Pentest Tools Website
78. Hacking Tools And Software
79. Hacking Tools 2019
80. Hacking Tools For Windows Free Download
81. Pentest Tools For Android
82. Hacker Search Tools
83. Hacking Tools For Games
84. Hacker Security Tools
85. Game Hacking
86. Beginner Hacker Tools
87. Hack Tools Mac
88. Beginner Hacker Tools
89. World No 1 Hacker Software
90. Free Pentest Tools For Windows
91. Pentest Tools Kali Linux
92. Underground Hacker Sites
93. Hacking Tools Software
94. Hacking Tools For Windows 7
95. Hack Tools Pc
96. Pentest Tools For Mac
97. Hacks And Tools
98. Pentest Automation Tools
99. Black Hat Hacker Tools
100. Hacking Tools Software
101. Hack Tools
102. Best Hacking Tools 2019
103. Pentest Tools Website Vulnerability
104. Hack Tools
105. Pentest Tools Github
106. Android Hack Tools Github
107. Hacker Tools Linux
108. Best Hacking Tools 2019
109. Hacking Tools
110. Hacking Tools Hardware
111. Hacker Tools 2020
112. Hacker Hardware Tools
113. Hack Tools Mac
114. Hacker Search Tools
115. Tools Used For Hacking
116. Hacker Security Tools
117. Tools For Hacker
118. Hacking Tools For Kali Linux
119. Github Hacking Tools
120. Best Pentesting Tools 2018
121. Best Hacking Tools 2019