Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2021-24175 PoC — WordPress Elementor Page Builder 授权问题漏洞

Source
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24175.yaml
Associated Vulnerability
Title:WordPress Elementor Page Builder 授权问题漏洞 (CVE-2021-24175)
Description:Elementor是Elementor团队的一款WordPress页面生成器，它提供多种设计元素，并支持自定义模板等。 Elementor Page Builder WordPress plugin before 4.1.7 存在安全漏洞，该漏洞允许未经身份验证的用户登录任何用户(包括管理员)提供相关的用户名,以及创建账户任意角色,比如管理。
Description
The Plus Addons for Elementor plugin (before version 4.1.7) allowed attackers to bypass authentication, gain admin access, and create accounts with elevated roles, even when registration was disabled and the Login widget was inactive.
File Snapshot

 id: CVE-2021-24175

info:
  name: The Plus Addons for Elementor Page Builder < 4.1.7 - Authenticatio

...
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.