CVE-2023-3124 - Elementor Pro <= 3.11.6 - Authenticated(Subscriber+) Privilege Escalation via update_page_option

Back Back to CVE browser

HIGH

Elementor Pro <= 3.11.6 - Authenticated(Subscriber+) Privilege Escalation via update_page_option

Published Jun 7, 2023

8.8

HIGH

CVSS 3.1

EPSS 22.72%

Description

The Elementor Pro plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the update_page_option function in versions up to, and including, 3.11.6. This makes it possible for authenticated attackers with subscriber-level capabilities to update arbitrary site options, which can lead to privilege escalation.

Affected products

Vendor n/a Product Elementor Website Builder Pro Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=3.11.6

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Elementor Website Builder Pro

unaffected

Version	Status	Constraints
0	affected	<=3.11.6

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-862

Missing Authorization

References (2)

https://blog.nintechnet.com/high-severity-vulnerability-fixed-in-wordpress-elementor-pro-plugin/
ExploitThird Party Advisory
https://www.wordfence.com/threat-intel/vulnerabilities/id/570474f2-c118-45e1-a237-c70b849b2d3c?source=cve
Broken LinkThird Party Advisory

Link	Providers	Tags
https://blog.nintechnet.com/high-severity-vulnerability-fixed-in-wordpress-elementor-pro-plugin/		ExploitThird Party Advisory
https://www.wordfence.com/threat-intel/vulnerabilities/id/570474f2-c118-45e1-a237-c70b849b2d3c?source=cve		Broken LinkThird Party Advisory