CVE-2023-5360 PoC — WordPress Plugin Royal Elementor Addons and Templates 代码问题漏洞

Source

https://github.com/Jenderal92/WP-CVE-2023-5360

Associated Vulnerability

Title:WordPress Plugin Royal Elementor Addons and Templates 代码问题漏洞 (CVE-2023-5360)
Description:WordPress和WordPress plugin都是WordPress基金会的产品。WordPress是一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。WordPress plugin是一个应用插件。 WordPress Plugin Royal Elementor Addons and Templates 1.3.79 版本之前存在代码问题漏洞，该漏洞源于无法正确验证上传的文件，这可能导致远程代码执行。

Description

Python 2.7

Readme

# WP-CVE-2023-5360

<p>Royal Elementor Addons and Templates <= 1.3.78 – Unauthenticated Arbitrary File Upload</p>

  Python 2.7

Buy Coffee :
<li>Bitcoin $: 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1</li>
<li>Perfect Money $: U22270614</li>
<li>Saweria $: https://saweria.co/Shin403</li>
<li>Trakteer $: https://trakteer.id/shin403</li>
<li>Buymeacoffee $: https://www.buymeacoffee.com/shin.code</li>

![Screenshot_2023-11-03-07-59-35-076-edit_com termux](https://github.com/Jenderal92/WP-CVE-2023-5360/assets/59664965/599141ce-9f22-440b-ba6f-4c85be82e488)


# How To Use?

<li>Install Python 2.7 <a href="https://www.python.org/ftp/python/2.7.17/python-2.7.17.amd64.msi"> Download Here</a></li>
<li>python file.py</li>
<p>Reff : https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/royal-elementor-addons/royal-elementor-addons-and-templates-1378-unauthenticated-arbitrary-file-upload</p>

File Snapshot


 [4.0K]  /data/pocs/27836579364ae674ea6cad8dfc2f6e88f9286684
├── [2.0K]  cve-2023-5360.py
├── [ 904]  README.md
└── [1.7K]  scanner.py

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!