PT-2025-22748 · Elementor · Drag/Drop File Upload For Elementor Forms

·

CVE-2025-47492

·

Publicado

2025-05-23

·

Atualizado

2025-05-23

CVSS v3.1

8.6

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Drag and Drop File Upload for Elementor Forms versions 1.4.3 and earlier
Description The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a Path Traversal vulnerability. This vulnerability affects the Drag and Drop File Upload for Elementor Forms, allowing unauthorized access to files outside the intended directory.
Recommendations For versions 1.4.3 and earlier, update to a version later than 1.4.3 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2025-47492

Produtos afetados

Drag/Drop File Upload For Elementor Forms