If your website is Film noir Archivespowered by the WordPress page-builder Elementor, double-check if you're using this popular plugin. Because, if you are, hackers can easily stage a complete takeover of your website thanks to a newly discovered security flaw.
Security researchers at Patchstack have released a new reportabout a concerning cybersecurity issue related to the WordPress plugin Essential Addons for Elementor. The plugin provides users with an assortment of pre-built WordPress blocks and templates for use when creating or updating their website.
"This plugin suffers from an unauthenticated privilege escalation vulnerability and allows any unauthenticated user to escalate their privilege to that of any user on the WordPress site," writes Patchstack in its report.
Basically, malicious actors can take advantage of this to reset the password of any user, including the administrator's account. If that latter account's password is reset, a hacker could basically have access to the entire website – backend and all – and take control of the site from its rightful owner. If a targeted website stores user information, this bad actor would have access to and control of that as well.
"This vulnerability occurs because this password reset function does not validate a password reset key and instead directly changes the password of the given user," explains Patchstack.
The plugin vulnerability has since been patched and Essential Addons for Elementor users are being urged to update to version 5.7.2. All versions of the plugin prior, going back to version 5.4.0, are affected by the vulnerability. So, be sure to update the plugin!
More than 43 percentof all of the websites on the internet use WordPress. Elementor is a popular website builder for WordPress-powered sites. More than 12 millionWordPress-sites utilize Elementor. According to the WordPress Plugin Directory, more than 1 millionactive websites have the Essential Addons for Elementor installed.
Topics Cybersecurity
The State of PC Gaming in 2016
Best Black Friday smartwatch deal: Get 52% off Samsung Galaxy Watch 6
Target Black Friday 2024: Ad and best deals
Best Black Friday Oura Ring deal: Save $100 on the Oura Ring Gen3 Heritage
Dyson V8 Plus cordless vacuum: $120 off at Amazon
Sparta Prague vs. Atletico Madrid 2024 livestream: Watch Champions League for free
Best Black Friday PS5 bundle deal: Get $75 off 'Fortnite Cobalt Star' bundle
iOS 18.2 Apple Mail gets major redesign: 3 biggest updates
Amazon Pet Day: All the best deals
Best Amazon Black Friday deals: Premium brands like Ninja, Dyson, Apple and more are up to 50% off
10 Tech Predictions for 2017
Thanksgiving dinner from Dollar Tree? TikTok creator going viral for her $20 holiday meal
The internet doesn’t like the new iOS 18 Photos app redesign — how to fix it
Nintendo Switch Pro Controller deal: Save $20.99 at Walmart
How to Settle Down with Dystopia
Best Black Friday Apple Watch SE 40mm deal: Get $100 off for Black Friday
Max Black Friday streaming deal: Score 6 months for $2.99/month
Black Friday TV deals from Amazon, Best Buy, and Walmart
Philips now allows customers to 3D print replacement parts
Best Black Friday Fitbit deal: Get $60 off Charge 6
Ariana Grande talked to 'Time' magazine about the Manchester Arena attackNetflix locks down production deal with Barack and Michelle ObamaPete Davidson: Donald Trump was 'weird all week' while hosting 'SNL'Annual invasion of lake flies over Lake Winnebago captured on weather radarWe're almost positive this is where Google Duplex called for a mealSerena Williams' royal reception outfit had a very relatable surpriseSlack is downHow VR helps students with autism practice social interactionAnnual invasion of lake flies over Lake Winnebago captured on weather radarEven Harry and Meghan will clash over British vs. American English7 movies that show how bonkers Prince Harry's royal lineage isEverything we know about 'Call of Duty: Black Ops 4'How we faced much more than the dark in 'Are You Afraid of the Dark?'Analogue's Super Nt is an SNES Classic for gaming's true hipstersThe nostalgic power of Korean dramas — and why you should start binging right nowWhy do computers in movies still make super annoying sounds?Donald Glover opens up about the touching full'National Geographic' plastic bag cover dubbed 'one for the ages'RED's Hydrogen phone with 'holographic display' is launching soonElon Musk says quickest Tesla Model 3 will go from 0 to 60 mph in 3.5 seconds One tweet summarizes tonight's presidential debate What it's like to watch Matt Damon and Ben Affleck perform 'Good Will Hunting' live Drake just beat a Michael Jackson record in this year's AMA nominations Donald Trump and his debate chair get a whirlwind Photoshop battle The major issue that was ignored in the presidential debate Did Martha Raddatz just win the debate? Hurricane Matthew unearths Civil War This debate audience member has become a glorious meme Ken Bone was the light in the dark second presidential debate tunnel Former MLB star Curt Schilling made a hella good point about poopholes during the debate Everyone is very confused by Nicki Minaj's new fruit Madame Tussauds unveils sweaty, shirtless waxwork of the Biebs Uber shares data to show how the Australian commute is still horrible People are turning the debate into a glorious sing Turbulence shakes a plane like a lil' leaf as storms lash Australian city Desert Trip: The Rolling Stones cover the Beatles, and other End Times signs Bad news: Verizon will not offer replacements of the Samsung Note7 Muslims throw Trumps' answer back in his face in the most clever way Trump’s idea of debate prep is a Facebook Live with Bill Clinton’s accusers Donald Trump just crossed a major line during Sunday night's debate
2.464s , 8199.8984375 kb
Copyright © 2025 Powered by 【Film noir Archives】,Pursuit Information Network