Piotnet Addons for Elementor Pro Arbitrary File Upload Vulnerability

A vulnerability allowing arbitrary file uploads has been identified in the Piotnet Addons for Elementor Pro plugin for WordPress, affecting all versions through 7.1.70. The issue arises from inadequate file type validation in the 'pafe_ajax_form_builder' function. The plugin's extension blacklist only partially protects against harmful uploads by blocking certain file types like php and exe, while still permitting dangerous extensions such as .phar and .phtml. This flaw enables unauthenticated attackers to upload arbitrary files to the server, potentially leading to remote code execution, especially if a file upload field is included in the form.

Impact

Exploitation of this vulnerability could allow for unauthorized file uploads, which may be executed remotely, depending on the nature of the uploaded file.