CVE-2023-48777

Severity

CRITICAL

CVSS

9.9

EPSS

0.041

Risk score

41.04

CISA KEV

PoC

Published

2024-03-26

Modified

2026-04-28

First seen

2026-08-07

Aliases

EUVD-2023-52810, GHSA-VRWG-Q62P-8QVC

Products

Elementor:Elementor Website Builder 3.3.0 ≤3.18.1

Sources

euvd EUVD-2023-52810

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Elementor.Com Elementor Website Builder.This issue affects Elementor Website Builder: from 3.3.0 through 3.18.1.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-52810
https://patchstack.com/database/vulnerability/elementor/wordpress-elementor-plugin-3-18-0-arbitrary-file-upload-vulnerability?_s_id=cve