CVE-2022-1329

概要

参考情報

• packetstormsecurity.com/files/168615/WordPress-Elementor-3.6.2-Shell-Upload.html · Exploit
• plugins.trac.wordpress.org/changeset/2708766/elementor/trunk/core/app/modules/onboarding/module.php · Patch
• pluginvulnerabilities.com/2022/04/12/5-million-install-wordpress-plugin-elementor-contains-authenticated-remote-code-execution-rce-vulnerability · Exploit
• wordfence.com/blog/2022/04/elementor-critical-remote-code-execution-vulnerability · Exploit

website builder のその他の脆弱性

• CVE-2025-8081中 4.9The Elementor plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.30.2 via the Import_Images::…
• CVE-2025-3075中 5.4The Elementor Website Builder – More Than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plug…
• CVE-2024-54444中 5.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor Elementor Website Builder el…
• CVE-2024-13445中 5.4The Elementor Website Builder – More Than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the bord…
• CVE-2024-8494中 6.5The Elementor Website Builder Pro plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including,…