【Taste of Future Sister-in-law (2023)】

Source：Feast Information Network Editor：Entertainment Time：2025-06-27 00:03:26

If your website is Taste of Future Sister-in-law (2023)powered by the WordPress page-builder Elementor, double-check if you're using this popular plugin. Because, if you are, hackers can easily stage a complete takeover of your website thanks to a newly discovered security flaw.

Security researchers at Patchstack have released a new reportabout a concerning cybersecurity issue related to the WordPress plugin Essential Addons for Elementor. The plugin provides users with an assortment of pre-built WordPress blocks and templates for use when creating or updating their website.

"This plugin suffers from an unauthenticated privilege escalation vulnerability and allows any unauthenticated user to escalate their privilege to that of any user on the WordPress site," writes Patchstack in its report.

Mashable Light Speed Want more out-of-this world tech, space and science stories? Sign up for Mashable's weekly Light Speed newsletter. By clicking Sign Me Up, you confirm you are 16+ and agree to our Terms of Use and Privacy Policy. Thanks for signing up!

You May Also Like

SEE ALSO: This Google AI keynote could have been a Gmail

Basically, malicious actors can take advantage of this to reset the password of any user, including the administrator's account. If that latter account's password is reset, a hacker could basically have access to the entire website – backend and all – and take control of the site from its rightful owner. If a targeted website stores user information, this bad actor would have access to and control of that as well.

"This vulnerability occurs because this password reset function does not validate a password reset key and instead directly changes the password of the given user," explains Patchstack.

Update the plugin as soon as possible

The plugin vulnerability has since been patched and Essential Addons for Elementor users are being urged to update to version 5.7.2. All versions of the plugin prior, going back to version 5.4.0, are affected by the vulnerability. So, be sure to update the plugin!

More than 43 percentof all of the websites on the internet use WordPress. Elementor is a popular website builder for WordPress-powered sites. More than 12 millionWordPress-sites utilize Elementor. According to the WordPress Plugin Directory, more than 1 millionactive websites have the Essential Addons for Elementor installed.

Topics Cybersecurity

Previous：Best JBL deal: Save $80 on JBL Xtreme 4 portable speaker

Next：Yes, that was Ke Huy Quan on the phone in 'The White Lotus' Season 3

【Taste of Future Sister-in-law (2023)】

Update the plugin as soon as possible

Related Articles

Related Recommendations

Categories

Latest Articles

Popular Articles

Hot Recommendations

Featured Column

Quick Links

Quick Links