Unlimited Elements For Elementor Plugin Vulnerable to Remote Code Execution

CVE-2023-6743

Summary

The Unlimited Elements For Elementor plugin for WordPress has a critical vulnerability that permits Remote Code Execution. Attackers with contributor access or higher can exploit this flaw through the template import functionality. The vulnerability affects all versions of the plugin up to and including 1.5.89, allowing unauthorized code to be executed on the server, potentially leading to severe consequences for affected websites.

References