S4E just found a medium ssl lucky13 vulnerability scanner
critical·Product Based Web Vulnerabilities·Updated Oct 8, 2024

CVE-2023-48777 Scanner

Targets the template import functionality in Elementor, allowing unauthenticated attackers to upload malicious files and execute arbitrary code on the server.

Est. Time~10 seconds
Scan TypeSingle Scan
Targetsdomain, ipv4, subdomain
CostFree
3.2k
Times Used
continuous scan runs
3.4k
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
CVECVE-2023-48777
8.8
CVSScritical
Exploitable remotely over the internet · low-privilege account sufficient.

Unrestricted Upload of File with Dangerous Type vulnerability in Elementor.Com Elementor Website Builder.This issue affects Elementor Website Builder: from 3.3.0 through 3.18.1.

Attack Vector
Network
Privileges Req.
Low
User Interaction
None
Affected
Elementor Website Builderby Elementor.com
3.3.0
website_builderby elementor
3.3.0
Updated Aug 22, 2026View on NVD →
Detail

WordPress Elementor is a widely used drag-and-drop page builder plugin that enables website developers, designers, and content creators to construct visually appealing pages without writing code. It is employed by freelancers, agencies, and businesses to rapidly design responsive layouts for blogs, e-commerce stores, and corporate sites. Elementor's extensive widget library and template system simplify site customization, making it a staple in the WordPress ecosystem. Its popularity means that any security flaw can affect millions of sites, underscoring the need for regular vulnerability assessments.

CVE-2023-48777 is a critical Remote Code Execution (RCE) vulnerability that arises from improper validation of template imports within Elementor. The flaw allows an attacker to bypass security checks and upload arbitrary files, including PHP shells, to the server. This occurs because the plugin fails to adequately sanitize file types and contents during the import process, enabling malicious payloads to be executed. The vulnerability is rated CVSS 9.9 due to its low complexity and potential for full system compromise.

Technically, the vulnerability is triggered through the template import endpoint, specifically the `elementor-ajax` action handler. An unauthenticated attacker can craft a malicious request containing a base64-encoded PHP file disguised as a valid Elementor template. The plugin's import function does not verify the file's integrity or type, allowing the attacker to write the payload to the server's file system. Once written, the attacker can access the file directly via a web request, leading to remote code execution.

If exploited, an attacker can execute arbitrary commands on the web server, potentially gaining full control over the WordPress installation. This could lead to data theft, website defacement, malware distribution, or lateral movement within the network. Given Elementor's widespread use, the impact is severe, affecting millions of sites. Immediate remediation is critical to prevent unauthorized access and maintain site integrity.

Solution Advice
  • Update the WordPress Elementor plugin to version 3.18.2 or later, which patches the vulnerability.
  • Restrict file upload permissions to only trusted roles and implement strict MIME type validation.
  • Disable the template import feature if not required, or restrict access via .htaccess rules.
  • Implement a Web Application Firewall (WAF) to block malicious requests targeting the import endpoint.
  • Regularly audit server logs for suspicious file uploads or execution attempts.
  • Use security plugins to monitor file integrity and detect unauthorized changes.
  • Enforce strong authentication and limit user privileges to minimize attack surface.
  • Conduct periodic vulnerability scans with tools like S4E to identify unpatched plugins.

Get AI-powered remediation steps tailored to your asset.

Try AI Solutions →

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.