CVE-2020-20634

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Elementor 2.9.5 and below WordPress plugin allows authenticated users to activate its safe mode feature. This can be exploited to disable all security plugins on the blog.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected software

No affected versions have been published.

Timeline

Published: Aug 21, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-206367.5SQL injection vulnerability found in Joyplus-cms v.1.6.0 allows a remote attacker to access sensitive information via the id parameter of th CVE-2020-206406.1Cross Site Scripting (XSS) vulnerability in ECShop 4.0 due to security filtering issues, in the user.php file, we can use the html entity en CVE-2020-206428.8Cross Site Request Forgery (CSRF) vulnerability exists in EyouCMS 1.3.6 that can add an htm page to execute the js code via login.php?m=admi CVE-2020-206455.4Cross Site Scripting (XSS) vulnerability exists in EyouCMS1.3.6 in the basic_information area.CVE-2020-206577.5Buffer overflow vulnerability in fcovatti libiec_iccp_mod v1.5, allows attackers to cause a denial of service via an unexpected packet while CVE-2020-206587.5Buffer overflow vulnerability in fcovatti libiec_iccp_mod v1.5, allows attackers to cause a denail of service when trying to calloc an unexp CVE-2020-206626.5libiec_iccp_mod v1.5 contains a heap-buffer-overflow in the component mms_client_example1.c.CVE-2020-206636.5libiec_iccp_mod v1.5 contains a heap-buffer-overflow in the component mms_client_connection.c.CVE-2020-206646.5libiec_iccp_mod v1.5 contains a segmentation violation in the component server_example1.c.CVE-2020-206657.5rudp v0.6 was discovered to contain a memory leak in the component main.c.CVE-2020-206708.8An arbitrary file upload vulnerability in /admin/media/upload of ZKEACMS V3.2.0 allows attackers to execute arbitrary code via a crafted HTM CVE-2020-206718.8A cross-site request forgery (CSRF) in KiteCMS V1.1 allows attackers to arbitrarily add an administrator account.