CVE-2020-20634: Medium severity elementor website builder vulnerability
Published Aug 21, 2020
·Updated
Elementor 2.9.5 and below WordPress plugin allows authenticated users to activate its safe mode feature. This can be exploited to disable all security plugins on the blog.
Affected Software
1 affected component
Elementor Website Builder WordPress<=2.9.5
Event History
Aug 21, 2020
CVE Published
via MITRE·02:52 PM
Data Sourced
via MITRE·02:52 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for Elementor WordPress plugin?
The vulnerability ID for Elementor WordPress plugin is CVE-2020-20634.
2
What is the impact of CVE-2020-20634?
CVE-2020-20634 allows authenticated users to activate the safe mode feature and disable all security plugins on the blog.
3
What is the severity level of CVE-2020-20634?
The severity level of CVE-2020-20634 is medium, with a severity value of 6.5.
4
How can the safe mode feature in Elementor plugin be exploited?
Authenticated users can exploit the safe mode feature in Elementor plugin to disable all security plugins on the blog.
5
Is there a fix available for CVE-2020-20634?
Yes, a fix has been released for CVE-2020-20634. It is recommended to update to a version above 2.9.5 of the Elementor plugin.