Critical Bug Found In WordPress Plugin For Elementor With Over A Million Installations

 

A WordPress plugin with over one million installs has been found to contain a critical vulnerability that could result in the execution of arbitrary code on compromised websites.

The plugin in question is Essential Addons for Elementor, which provides WordPress site owners with a library of over 80 elements and extensions to help design and customize pages and posts.

"This vulnerability allows any user, regardless of their authentication or authorization status, to perform a local file inclusion attack," Patchstack said in a report. "This attack can be used to include local files on the filesystem of the website, such as /etc/passwd. This can also be used to perform RCE by including a file with malicious PHP code that normally cannot be executed."

That said, the vulnerability only exists if widgets like dynamic gallery and product gallery are used, which utilize the vulnerable function, resulting in local file inclusion – an attack technique in which a web application is tricked into exposing or running arbitrary files on the webserver.

The flaw impacts all versions of the addon from 5.0.4 and below, and credited with discovering the vulnerability is researcher Wai Yan Myo Thet. Following responsible disclosure, the security hole was finally plugged in version 5.0.5 released on January 28 "after several insufficient patches."

The development comes weeks after it emerged that unidentified actors tampered with dozens of WordPress themes and plugins hosted on a developer's website to inject a backdoor with the goal of infecting further sites.

More information

1. Hacker Tools List
2. Hacker Tools Apk
3. Pentest Tools Online
4. Hacker Tools Linux
5. Hacking Tools For Windows Free Download
6. Best Pentesting Tools 2018
7. Nsa Hack Tools Download
8. Nsa Hack Tools Download
9. Hack Tools For Games
10. Hack Tools 2019
11. Pentest Tools Tcp Port Scanner
12. Hack Tools For Games
13. Hackers Toolbox
14. Pentest Tools
15. Pentest Box Tools Download
16. Hak5 Tools
17. Hack Tools Pc
18. Pentest Tools For Android
19. Hacking Tools For Mac
20. Hacker Tools Hardware
21. Hacker Techniques Tools And Incident Handling
22. Hacking Tools For Pc
23. Pentest Tools For Android
24. Hack Tools Github
25. Hacking Tools Kit
26. Hacking Apps
27. Pentest Automation Tools
28. Hacking Tools Kit
29. Hacking Tools Usb
30. Tools 4 Hack
31. Hack Apps
32. Hack Tools Github
33. Nsa Hack Tools
34. Pentest Tools Url Fuzzer
35. Hack Tools
36. Termux Hacking Tools 2019
37. Hacker
38. Hacking Tools For Windows 7
39. Hacker Tools Free
40. Hacking Tools For Kali Linux
41. Hacker
42. Pentest Tools Nmap
43. Hacking Tools Online
44. Top Pentest Tools
45. Pentest Tools Find Subdomains
46. Hacker Tools Windows
47. Hacker
48. Hacking Tools Windows
49. Hacking Tools Kit
50. Hack Tools
51. Pentest Tools Alternative
52. Nsa Hack Tools
53. Hacking Tools Software
54. Hak5 Tools
55. Pentest Tools Linux
56. Hacking Tools Online
57. Hack Tools For Mac
58. Hacker Tools Windows
59. How To Install Pentest Tools In Ubuntu
60. Hacker Tools For Pc
61. Pentest Tools Windows
62. Pentest Tools Windows
63. Pentest Tools Review
64. Hacking Tools For Beginners
65. Hacking Tools Kit
66. Free Pentest Tools For Windows
67. Hacking Tools For Beginners
68. Hacking Tools For Mac
69. Hacking Tools Windows 10
70. Pentest Tools For Mac
71. Hacker Tools
72. Hacker Search Tools
73. Hack Tools For Games
74. Pentest Recon Tools
75. Hack Tools Mac
76. Hacking Tools And Software
77. Hacking Tools Kit
78. Pentest Tools Port Scanner
79. Hacker Tools Online
80. Computer Hacker
81. Pentest Automation Tools
82. Hack Tools For Pc
83. Nsa Hacker Tools
84. Hacking Tools For Pc
85. Hacker Tools Linux
86. Hacking Tools Mac
87. Beginner Hacker Tools
88. Pentest Tools List
89. Blackhat Hacker Tools
90. Pentest Tools Review
91. Hacking Tools Download
92. Hacking Tools Hardware
93. Hacking Tools Name
94. Hack Tools For Pc
95. Physical Pentest Tools
96. Pentest Tools Alternative
97. Bluetooth Hacking Tools Kali
98. Kik Hack Tools
99. Hacking Tools For Windows 7
100. Hacker Tools For Pc
101. Hacking Tools For Pc
102. Hacking Tools
103. Hack Tools
104. Hacking Tools And Software
105. Hack Tools Mac
106. What Is Hacking Tools
107. Growth Hacker Tools
108. Hackers Toolbox
109. Hacker Tools Windows
110. Hacker Tools Apk Download
111. Blackhat Hacker Tools
112. Beginner Hacker Tools
113. Hacking Tools 2020
114. Nsa Hack Tools Download
115. World No 1 Hacker Software
116. Hacking Tools For Beginners
117. Pentest Tools Kali Linux
118. Hacking Tools For Mac
119. Hacker Tools Apk Download
120. New Hacker Tools
121. Hacking Tools Online
122. Ethical Hacker Tools
123. Hacker Tools Hardware
124. Hacker Hardware Tools
125. Hackers Toolbox
126. Hacker Tool Kit
127. Hacking Tools For Windows 7
128. Hack Apps
129. Pentest Tools Kali Linux
130. Hacking Tools Windows
131. Easy Hack Tools
132. Hacker Tools Hardware
133. Hack Tools 2019
134. Hack And Tools
135. Hacker Tools For Mac
136. Black Hat Hacker Tools
137. Growth Hacker Tools
138. Pentest Tools Apk
139. Hacking Tools For Games
140. Hack Tools For Games
141. Pentest Tools For Android
142. Pentest Tools
143. Hacking Tools For Kali Linux
144. Best Hacking Tools 2020
145. Hacking Tools Kit
146. Hacker Tools Software
147. Hacking Tools Hardware
148. Hack Tools Github
149. Hackers Toolbox
150. Hacking Tools 2019
151. Hacker Tools Apk Download
152. Hack App
153. Hacking Tools For Kali Linux
154. Hacking Tools And Software
155. Pentest Tools Framework
156. Hack Tool Apk
157. Easy Hack Tools
158. Best Pentesting Tools 2018
159. Hacker Tools Free
160. Pentest Box Tools Download
161. Hackrf Tools
162. Hack Tools 2019
163. New Hack Tools
164. Github Hacking Tools
165. Hacking Tools And Software
166. Hacker Tools For Ios
167. Pentest Recon Tools
168. Hack Tools For Games
169. How To Make Hacking Tools