{"cvss":7.2,"datePublished":"2020-05-17T00:00:00Z","dateUpdated":"2020-05-17T00:00:00Z","description":"An issue was discovered in the \"Ultimate Addons for Elementor\" plugin before 1.24.2 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13126. Unauthenticated attackers can create users with the Subscriber role even if registration is disabled.","dueDate":"","id":"CVE-2020-13125","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"ultimate_addons_for_elementor","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"Ultimate Addons for Elementor plugin before 1.24.2 for WordPress Unauthenticated Subscriber User Bypass","vendor":"brainstormforce"}