CVE-2023-31231: WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Plugin <= 1.5.65 is vulnerable to Arbitrary File Upload
Published Dec 20, 2023
·Updated
Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates).This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 1.5.65.
Affected Software
1 affected component
unlimited-elements Unlimited Elements For Elementor Wordpress<1.5.66
Remediation
Information
Update to 1.5.66 or a higher version.
Event History
Dec 20, 2023
CVE Published
via MITRE·06:56 PM
Data Sourced
via MITRE·06:56 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-31231?
CVE-2023-31231 has a high severity rating due to the unrestricted upload of potentially dangerous file types.
2
How do I fix CVE-2023-31231?
To fix CVE-2023-31231, update Unlimited Elements For Elementor to version 1.5.66 or later.
3
What are the potential risks associated with CVE-2023-31231?
The risks include unauthorized file uploads, which could lead to remote code execution or data breaches.
4
Which versions of Unlimited Elements For Elementor are affected by CVE-2023-31231?
CVE-2023-31231 affects Unlimited Elements For Elementor versions prior to 1.5.66.
5
Is CVE-2023-31231 specific to certain environments?
CVE-2023-31231 specifically impacts installations of Unlimited Elements For Elementor on WordPress.