{"containers": {"cna": {"affected": [{"product": "The Plus Addons for Elementor Page Builder", "vendor": "Unknown", "versions": [{"lessThan": "4.1.7", "status": "affected", "version": "4.1.7", "versionType": "custom"}]}], "credits": [{"lang": "en", "value": "Ville Korhonen (Seravo), Antony Booker (WP Charged)"}], "descriptions": [{"lang": "en", "value": "The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.7 was being actively exploited to by malicious actors to bypass authentication, allowing unauthenticated users to log in as any user (including admin) by just providing the related username, as well as create accounts with arbitrary roles, such as admin. These issues can be exploited even if registration is disabled, and the Login widget is not active."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-287", "description": "CWE-287 Improper Authentication", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2021-04-05T18:27:44", "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "shortName": "WPScan"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://wpscan.com/vulnerability/c311feef-7041-4c21-9525-132b9bd32f89"}, {"tags": ["x_refsource_MISC"], "url": "https://www.wordfence.com/blog/2021/03/critical-0-day-in-the-plus-addons-for-elementor-allows-site-takeover/"}, {"tags": ["x_refsource_MISC"], "url": "https://posimyth.ticksy.com/ticket/2713734/"}], "source": {"discovery": "UNKNOWN"}, "title": "The Plus Addons for Elementor Page Builder < 4.1.7 - Authentication Bypass", "x_generator": "WPScan CVE Generator", "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "contact@wpscan.com", "ID": "CVE-2021-24175", "STATE": "PUBLIC", "TITLE": "The Plus Addons for Elementor Page Builder < 4.1.7 - Authentication Bypass"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "The Plus Addons for Elementor Page Builder", "version": {"version_data": [{"version_affected": "<", "version_name": "4.1.7", "version_value": "4.1.7"}]}}]}, "vendor_name": "Unknown"}]}}, "credit": [{"lang": "eng", "value": "Ville Korhonen (Seravo), Antony Booker (WP Charged)"}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.7 was being actively exploited to by malicious actors to bypass authentication, allowing unauthenticated users to log in as any user (including admin) by just providing the related username, as well as create accounts with arbitrary roles, such as admin. These issues can be exploited even if registration is disabled, and the Login widget is not active."}]}, "generator": "WPScan CVE Generator", "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-287 Improper Authentication"}]}]}, "references": {"reference_data": [{"name": "https://wpscan.com/vulnerability/c311feef-7041-4c21-9525-132b9bd32f89", "refsource": "CONFIRM", "url": "https://wpscan.com/vulnerability/c311feef-7041-4c21-9525-132b9bd32f89"}, {"name": "https://www.wordfence.com/blog/2021/03/critical-0-day-in-the-plus-addons-for-elementor-allows-site-takeover/", "refsource": "MISC", "url": "https://www.wordfence.com/blog/2021/03/critical-0-day-in-the-plus-addons-for-elementor-allows-site-takeover/"}, {"name": "https://posimyth.ticksy.com/ticket/2713734/", "refsource": "MISC", "url": "https://posimyth.ticksy.com/ticket/2713734/"}]}, "source": {"discovery": "UNKNOWN"}}}}, "cveMetadata": {"assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "assignerShortName": "WPScan", "cveId": "CVE-2021-24175", "datePublished": "2021-04-05T18:27:44", "dateReserved": "2021-01-14T00:00:00", "dateUpdated": "2021-04-05T18:27:44", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:posimyth:the_plus_addons_for_elementor:*:*:*:*:*:wordpress:*:*", "matchCriteriaId": "11F2C7EF-3D4A-4C1C-9910-6C3654E7D019", "versionEndExcluding": "4.1.7", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.7 was being actively exploited to by malicious actors to bypass authentication, allowing unauthenticated users to log in as any user (including admin) by just providing the related username, as well as create accounts with arbitrary roles, such as admin. These issues can be exploited even if registration is disabled, and the Login widget is not active."}, {"lang": "es", "value": "El plugin de WordPress Plus Addons for Elementor Page Builder versiones anteriores a 4.1.7, estaban siendo explotados activamente por actores maliciosos para omitir la autenticaci\u00f3n, permitiendo a usuarios no autenticados iniciar sesi\u00f3n como cualquier usuario (incluyendo el administrador) al solo proporcionar el nombre de usuario relacionado, as\u00ed como dise\u00f1ar cuentas. con roles arbitrarios, como admin.&#xa0;Estos problemas pueden ser explotados incluso si el registro est\u00e1 deshabilitado y el widget de Login no est\u00e1 activo"}], "id": "CVE-2021-24175", "lastModified": "2021-04-09T17:22:32.290", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-04-05T19:15:16.123", "references": [{"source": "contact@wpscan.com", "tags": ["Broken Link"], "url": "https://posimyth.ticksy.com/ticket/2713734/"}, {"source": "contact@wpscan.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://wpscan.com/vulnerability/c311feef-7041-4c21-9525-132b9bd32f89"}, {"source": "contact@wpscan.com", "tags": ["Third Party Advisory"], "url": "https://www.wordfence.com/blog/2021/03/critical-0-day-in-the-plus-addons-for-elementor-allows-site-takeover/"}], "sourceIdentifier": "contact@wpscan.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-287"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-287"}], "source": "contact@wpscan.com", "type": "Secondary"}]}

{}