CVE-2020-13125

MEDIUM 6.5CVE-2020-13125 · Published 17/05/2020 · updated 17/06/2026

In short

CVE-2020-13125 is a MEDIUM (CVSS 6.5) vulnerability affecting ultimate addons for elementor (brainstormforce).
Chance of exploitation in the next 30 days (EPSS): 2.3%, higher than 83.4% of all vulnerabilities.
Fix: update to 1.24.2 or later.

Package	Affected versions	Patched versions
ultimate addons for elementor brainstormforce	`< 1.24.2`	`1.24.2`

Description

An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13126. Unauthenticated attackers can create users with the Subscriber role even if registration is disabled.

References

wpvulndb.com/vulnerabilities/10214 · Not Applicable
wordfence.com/blog/2020/05/combined-attack-on-elementor-pro-and-ultimate-addons-for-elementor-puts-1-million-sites-at-risk · Third Party Advisory

More vulnerabilities in ultimate addons for elementor

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free