CVE-2023-3124
HIGH EXPLOITEDElementor Pro <3.11.6 - Privilege Escalation
Title source: llmExploitation Summary
CVE-2023-3124 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including AmirWhiteHat.
AI-analyzed exploit summary This PoC exploits an authenticated privilege escalation vulnerability in Elementor Pro by updating WordPress site options to enable user registration and set the default role to administrator. It demonstrates the vulnerability by leveraging a missing capability check in the update_page_option function.
Description
The Elementor Pro plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the update_page_option function in versions up to, and including, 3.11.6. This makes it possible for authenticated attackers with subscriber-level capabilities to update arbitrary site options, which can lead to privilege escalation.
Exploits (1)
This PoC exploits an authenticated privilege escalation vulnerability in Elementor Pro by updating WordPress site options to enable user registration and set the default role to administrator. It demonstrates the vulnerability by leveraging a missing capability check in the update_page_option function.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H