CVE-2020-13125

An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in the wild in May 2020 in conjunction with…

High · published May 17, 2020

CVSS v3.0
7.2
EPSS
2%
Percentile
83.2
In the wild
Unconfirmed
What it is

An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13126. Unauthenticated attackers can create users with the Subscriber role even if registration is disabled.

The record
Technical detail
CVSS v3.0
7.2 · HIGH
Vector
CVSS:3.0/AC:L/AV:N/A:N/C:L/I:L/PR:N/S:C/UI:N
CVSS v4.0
Not supplied
EPSS
0.02307 · 83.2th percentile
Published
2020-05-17T00:39Z
EPSS history
Timeline
  • 17 MAY 00:39Z
    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in the wild in May 2020 in conjunction with…
    cvelistv5