CVE-2020-26596
CVSS V2 High 9
CVSS V3 High 8.8
Description
The Dynamic OOO widget for the Elementor Pro plugin through 3.0.5 for WordPress allows remote authenticated users to execute arbitrary code because only the Editor role is needed to upload executable PHP code via the PHP Raw snippet. NOTE: this issue can be mitigated by removing the Dynamic OOO widget or by restricting availability of the Editor role.
Overview
- CVE ID
- CVE-2020-26596
- Assigner
- cve@mitre.org
- Vulnerability Status
- Analyzed
- Published Version
- 2020-10-07T16:15:17
- Last Modified Date
- 2021-07-21T11:39:23
Weakness Enumerations
CPE Configuration (Product)
| CPE | Vulnerable | Operator | Version Start | Version End |
|---|---|---|---|---|
| AND | ||||
| cpe:2.3:a:elementor:elementor_pro:*:*:*:*:*:wordpress:*:* | 1 | OR | 3.0.5 | |
| cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:* | 0 | OR | 5.5.1 |
CVSS Version 2
- Version
- 2.0
- Vector String
- AV:N/AC:L/Au:S/C:C/I:C/A:C
- Access Vector
- NETWORK
- Access Compatibility
- LOW
- Authentication
- SINGLE
- Confidentiality Impact
- COMPLETE
- Integrity Impact
- COMPLETE
- Availability Impact
- COMPLETE
- Base Score
- 9
- Severity
- HIGH
- Exploitability Score
- 8
- Impact Score
- 10
CVSS Version 3
- Version
- 3.1
- Vector String
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Attack Vector
- NETWORK
- Attack Compatibility
- LOW
- Privileges Required
- LOW
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality Impact
- HIGH
- Availability Impact
- HIGH
- Base Score
- 8.8
- Base Severity
- HIGH
- Exploitability Score
- 2.8
- Impact Score
- 5.9
References
| Reference URL | Reference Tags |
|---|---|
| https://ww2.compunet.cl/dia-cero-en-plugin-de-wordpres-detectada-compunet-redteam/ | Exploit Third Party Advisory |
| https://elementor.com/pro/changelog/ | Release Notes Vendor Advisory |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2020-26596 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26596 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2022-05-10 07:04:07 | Added to TrackCVE | |||
| 2022-12-04 23:50:02 | 2020-10-07T16:15Z | 2020-10-07T16:15:17 | CVE Published Date | updated |
| 2022-12-04 23:50:02 | 2021-07-21T11:39:23 | CVE Modified Date | updated | |
| 2022-12-04 23:50:02 | Analyzed | Vulnerability Status | updated |