CVE-2021-24175

CRITICALNuclei

The Plus Addons for Elementor Page Builder < 4.1.7 - Authentication Bypass

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2021-24175 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.

Description

The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.7 was being actively exploited to by malicious actors to bypass authentication, allowing unauthenticated users to log in as any user (including admin) by just providing the related username, as well as create accounts with arbitrary roles, such as admin. These issues can be exploited even if registration is disabled, and the Login widget is not active.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Mar 8, 2021 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

Affected products and versions

2
ProductSourceVersion range

The Plus Addons for Elementor Page Builder

CVE List4.1.7 to < 4.1.7affected

the_plus_addons_for_elementor

Browse posimyth / the_plus_addons_for_elementor
VulnCheckVersion data not supplied

Nuclei templates

1
ProjectDiscoveryCRITICALThe Plus Addons for Elementor Page Builder < 4.1.7 - Authentication BypassCVSS 9.8

The Plus Addons for Elementor plugin (before version 4.1.7) allowed attackers to bypass authentication, gain admin access, and create accounts with elevated roles, even when registration was disabled and the Login widget was inactive.

Impact

Unauthenticated attackers can bypass authentication, gain administrator access, and create elevated privilege accounts even when registration is disabled, leading to complete WordPress site takeover.

Remediation

Fixed in 4.1.7

WeaknessesCWE-287
Authorspussycat0x
Template tagscvecve2021wordpresswp-themewpscanelementorplus-addonspassivevkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:posimyth:the_plus_addons_for_elementor:*:*:*:*:*:wordpress:*:*
FOFA: body="/wp-content/plugins/the-plus-addons-for-elementor-page-builder/"
https://wpscan.com/vulnerability/c311feef-7041-4c21-9525-132b9bd32f89/ https://www.wordfence.com/blog/2021/03/critical-0-day-in-the-plus-addons-for-elementor-allows-site-takeover/

Source: ProjectDiscovery

References

4