vulnerability

WordPress Plugin: elementor: CVE-2023-33922: Creation of Emergent Resource

Severity
4
CVSS
(AV:N/AC:L/Au:S/C:N/I:P/A:N)
Published
May 22, 2023
Added
May 15, 2025
Modified
May 15, 2025

Description

The Elementor plugin for WordPress is vulnerable to the creation of emergent resources due to insufficient input validation in the template "save_item" function in versions up to, and including, 3.13.3. This allows authenticated attackers, with contributor-level permissions or above, to create templates with an arbitrary post type, potentially allowing the exploitation of other plugins that depend on custom post types.

Solution

elementor-plugin-cve-2023-33922
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.