The Startklar Elementor Addons plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 1.7.13. This is due to the plugin not properly validating the path of an uploaded file prior to deleting it. This makes it possible for unauthenticated attackers to delete arbitrary files, including the wp-config.php file, which can make site takeover and remote code execution possible.

#CONFERENCE

An internationally recognized cybersecurity event series providing the most technical and relevant information security research.

The largest hacking and security conference with presentations, workshops, contests, villages and the premier Capture The Flag Contest.

We Cover All Information Security Conferences / Niches. We’re the original Cybersecurity Conferences directory. Our directory is updated and checked manually to prevent spam and ensure that we remain the community’s preferred resource information for Cybersecurity Conferences, Events, Meetings, and Seminars throughout 2024, 2025, and onwards!

The world's most comprehensive student-run cybersecurity event. It serves as an engaging platform for experiential learning and aims to inspire students to pursue education and careers in the field of cybersecurity.