CVE-2020-13126

概要

参考情報

• wpvulndb.com/vulnerabilities/10214 · Third Party Advisory
• wordfence.com/blog/2020/05/combined-attack-on-elementor-pro-and-ultimate-addons-for-elementor-puts-1-million-sites-at-risk · Third Party Advisory

elementor page builder のその他の脆弱性

• CVE-2025-3076中 5.4The Elementor Website Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘button_text’ parameter in all v…
• CVE-2020-20406中 5.4A stored XSS vulnerability exists in the Custom Link Attributes control Affect function in Elementor Page Builder 2.9.2 and earlier versions…
• CVE-2020-13865中 5.4The Elementor Page Builder plugin before 2.9.9 for WordPress suffers from multiple stored XSS vulnerabilities. An author user can create pos…
• CVE-2020-13864中 5.4The Elementor Page Builder plugin before 2.9.9 for WordPress suffers from a stored XSS vulnerability. An author user can create posts that r…
• CVE-2020-7055緊急 9.9An issue was discovered in Elementor 2.7.4. Arbitrary file upload is possible in the Elementor Import Templates function, allowing an attack…