Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin Elementor Website Builder Security Bypass - CVE-2020-36171 - Vulnerability Database
WP Plugin Elementor

WordPress Plugin Elementor Website Builder Security Bypass - CVE-2020-36171

Medium
Reference: CVE-2020-36171
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2020-36171
Title: WordPress Plugin Elementor Website Builder Security Bypass
Overview:

WordPress Plugin Elementor Website Builder is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently upload SVG files even if not allowed. WordPress Plugin Elementor Website Builder version 3.0.13 is vulnerable prior versions may also be affected.