Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2020-10-07	CVE-2020-26596	Improper Input Validation vulnerability in Elementor PRO 3.0.5 The Dynamic OOO widget for the Elementor Pro plugin through 3.0.5 for WordPress allows remote authenticated users to execute arbitrary code because only the Editor role is needed to upload executable PHP code via the PHP Raw snippet. network low complexity elementor CWE-20 critical	9.0

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.