Authenticated arbitrary file/directory deletion in elementor template import

An authenticated attacker with template import privileges could delete arbitrary files or directories on the server by manipulating the file path during template import cleanup. The fix adds path validation to ensure only files within the temporary upload directory can be deleted.

This vulnerability affects the following application versions:

• Elementor Website Builder 3.5.0
• Elementor Website Builder 3.5.0-beta1
• Elementor Website Builder 3.5.0-beta2
• Elementor Website Builder 3.5.0-beta3
• Elementor Website Builder 3.5.0-beta4
• Elementor Website Builder 3.5.0-beta5
• Elementor Website Builder 3.5.0-beta7
• Elementor Website Builder 3.5.0-beta8
• Elementor Website Builder 3.5.0-dev50
• Elementor Website Builder 3.5.0-dev51
• Elementor Website Builder 3.5.1
• Elementor Website Builder 3.5.2
• Elementor Website Builder 3.5.3
• Elementor Website Builder 3.5.4
• Elementor Website Builder 3.5.5
• Elementor Website Builder 3.5.6
• Elementor Website Builder 3.6.0
• Elementor Website Builder 3.6.0-beta1
• Elementor Website Builder 3.6.0-beta2
• Elementor Website Builder 3.6.0-beta3
• Elementor Website Builder 3.6.0-beta4
• Elementor Website Builder 3.6.0-beta5
• Elementor Website Builder 3.6.0-dev1
• Elementor Website Builder 3.6.0-dev2
• Elementor Website Builder 3.6.0-dev3
• Elementor Website Builder 3.6.0-dev4
• Elementor Website Builder 3.6.0-dev5
• Elementor Website Builder 3.6.0-dev6
• Elementor Website Builder 3.6.0-dev7
• Elementor Website Builder 3.6.0-dev8
• Elementor Website Builder 3.6.0-dev9
• Elementor Website Builder 3.6.0-dev10
• Elementor Website Builder 3.6.0-dev11
• Elementor Website Builder 3.6.0-dev13
• Elementor Website Builder 3.6.0-dev14
• Elementor Website Builder 3.6.0-dev16
• Elementor Website Builder 3.6.0-dev17
• Elementor Website Builder 3.6.0-dev18
• Elementor Website Builder 3.6.0-dev19
• Elementor Website Builder 3.6.0-dev20
• Elementor Website Builder 3.6.0-dev21
• Elementor Website Builder 3.6.0-dev22
• Elementor Website Builder 3.6.0-dev24
• Elementor Website Builder 3.6.0-dev25
• Elementor Website Builder 3.6.0-dev26
• Elementor Website Builder 3.6.0-dev27
• Elementor Website Builder 3.6.0-dev28
• Elementor Website Builder 3.6.0-dev29
• Elementor Website Builder 3.6.0-dev30
• Elementor Website Builder 3.6.0-dev31
• Elementor Website Builder 3.6.0-dev32
• Elementor Website Builder 3.6.0-dev33
• Elementor Website Builder 3.6.0-dev34
• Elementor Website Builder 3.6.0-dev35
• Elementor Website Builder 3.6.0-dev36
• Elementor Website Builder 3.6.0-dev37
• Elementor Website Builder 3.6.0-dev38
• Elementor Website Builder 3.6.0-dev39
• Elementor Website Builder 3.6.0-dev40
• Elementor Website Builder 3.6.0-dev41
• Elementor Website Builder 3.6.0-dev42
• Elementor Website Builder 3.6.0-dev43
• Elementor Website Builder 3.6.0-dev44
• Elementor Website Builder 3.6.0-dev45
• Elementor Website Builder 3.6.1
• Elementor Website Builder 3.6.2
• Elementor Website Builder 3.6.3
• Elementor Website Builder 3.6.4
• Elementor Website Builder 3.6.5
• Elementor Website Builder 3.6.6
• Elementor Website Builder 3.6.7
• Elementor Website Builder 3.6.8
• Elementor Website Builder 3.7.0
• Elementor Website Builder 3.7.0-beta1
• Elementor Website Builder 3.7.0-beta2
• Elementor Website Builder 3.7.0-beta3
• Elementor Website Builder 3.7.0-beta4
• Elementor Website Builder 3.7.0-dev1
• Elementor Website Builder 3.7.0-dev2
• Elementor Website Builder 3.7.0-dev3
• Elementor Website Builder 3.7.0-dev4
• Elementor Website Builder 3.7.0-dev5
• Elementor Website Builder 3.7.0-dev6
• Elementor Website Builder 3.7.0-dev7
• Elementor Website Builder 3.7.0-dev8
• Elementor Website Builder 3.7.0-dev9
• Elementor Website Builder 3.7.0-dev10
• Elementor Website Builder 3.7.1
• Elementor Website Builder 3.7.2
• Elementor Website Builder 3.7.3
• Elementor Website Builder 3.7.4
• Elementor Website Builder 3.7.5
• Elementor Website Builder 3.7.6
• Elementor Website Builder 3.7.7
• Elementor Website Builder 3.7.8
• Elementor Website Builder 3.8.0
• Elementor Website Builder 3.8.0-beta1
• Elementor Website Builder 3.8.0-beta2
• Elementor Website Builder 3.8.0-beta3
• Elementor Website Builder 3.8.0-beta4
• Elementor Website Builder 3.8.0-beta5
• Elementor Website Builder 3.8.0-beta6
• Elementor Website Builder 3.8.0-dev1
• Elementor Website Builder 3.8.0-dev2
• Elementor Website Builder 3.8.0-dev3
• Elementor Website Builder 3.8.0-dev4
• Elementor Website Builder 3.8.1
• Elementor Website Builder 3.9.0
• Elementor Website Builder 3.9.0-beta1
• Elementor Website Builder 3.9.0-beta2
• Elementor Website Builder 3.9.0-beta3
• Elementor Website Builder 3.9.0-dev1
• Elementor Website Builder 3.9.0-dev2
• Elementor Website Builder 3.9.0-dev3
• Elementor Website Builder 3.9.0-dev4
• Elementor Website Builder 3.9.1
• Elementor Website Builder 3.9.2
• Elementor Website Builder 3.10.0
• Elementor Website Builder 3.10.0-beta1
• Elementor Website Builder 3.10.0-beta2
• Elementor Website Builder 3.10.0-beta3
• Elementor Website Builder 3.10.0-dev1
• Elementor Website Builder 3.10.1
• Elementor Website Builder 3.10.2
• Elementor Website Builder 3.11.0
• Elementor Website Builder 3.11.0-beta1
• Elementor Website Builder 3.11.0-beta2
• Elementor Website Builder 3.11.0-beta3
• Elementor Website Builder 3.11.0-dev1
• Elementor Website Builder 3.11.0-dev2
• Elementor Website Builder 3.11.0-dev3
• Elementor Website Builder 3.11.1
• Elementor Website Builder 3.11.2
• Elementor Website Builder 3.11.3
• Elementor Website Builder 3.11.4
• Elementor Website Builder 3.11.5
• Elementor Website Builder 3.12.0
• Elementor Website Builder 3.12.0-beta1
• Elementor Website Builder 3.12.0-beta2
• Elementor Website Builder 3.12.0-beta3
• Elementor Website Builder 3.12.0-dev1
• Elementor Website Builder 3.12.0-dev2
• Elementor Website Builder 3.12.0-dev3
• Elementor Website Builder 3.12.0-dev4
• Elementor Website Builder 3.12.1
• Elementor Website Builder 3.12.2
• Elementor Website Builder 3.13.0
• Elementor Website Builder 3.13.0-beta1
• Elementor Website Builder 3.13.0-beta2
• Elementor Website Builder 3.13.0-beta3
• Elementor Website Builder 3.13.0-beta4
• Elementor Website Builder 3.13.0-dev1
• Elementor Website Builder 3.13.0-dev2
• Elementor Website Builder 3.13.0-dev3
• Elementor Website Builder 3.13.0-dev4
• Elementor Website Builder 3.13.1
• Elementor Website Builder 3.13.2
• Elementor Website Builder 3.13.3
• Elementor Website Builder 3.13.4
• Elementor Website Builder 3.14.0
• Elementor Website Builder 3.14.0-beta1
• Elementor Website Builder 3.14.0-beta2
• Elementor Website Builder 3.14.0-beta3
• Elementor Website Builder 3.14.0-beta4
• Elementor Website Builder 3.14.0-beta5
• Elementor Website Builder 3.14.0-dev1
• Elementor Website Builder 3.14.0-dev2
• Elementor Website Builder 3.14.0-dev3
• Elementor Website Builder 3.14.0-dev4
• Elementor Website Builder 3.14.0-dev5
• Elementor Website Builder 3.14.1
• Elementor Website Builder 3.15.0
• Elementor Website Builder 3.15.0-beta1
• Elementor Website Builder 3.15.0-beta2
• Elementor Website Builder 3.15.0-beta3
• Elementor Website Builder 3.15.0-beta4
• Elementor Website Builder 3.15.0-beta5
• Elementor Website Builder 3.15.0-beta6
• Elementor Website Builder 3.15.0-dev1
• Elementor Website Builder 3.15.0-dev2
• Elementor Website Builder 3.15.0-dev3
• Elementor Website Builder 3.15.0-dev4
• Elementor Website Builder 3.15.0-dev5
• Elementor Website Builder 3.15.0-dev6
• Elementor Website Builder 3.15.1
• Elementor Website Builder 3.15.2
• Elementor Website Builder 3.15.3
• Elementor Website Builder 3.16.0
• Elementor Website Builder 3.16.0-beta1
• Elementor Website Builder 3.16.0-beta2
• Elementor Website Builder 3.16.0-beta3
• Elementor Website Builder 3.16.0-beta4
• Elementor Website Builder 3.16.0-dev1
• Elementor Website Builder 3.16.0-dev2
• Elementor Website Builder 3.16.0-dev3
• Elementor Website Builder 3.16.0-dev4
• Elementor Website Builder 3.16.1
• Elementor Website Builder 3.16.2
• Elementor Website Builder 3.16.3
• Elementor Website Builder 3.16.4
• Elementor Website Builder 3.16.5
• Elementor Website Builder 3.16.6
• Elementor Website Builder 3.17.0
• Elementor Website Builder 3.17.0-beta1
• Elementor Website Builder 3.17.0-beta2
• Elementor Website Builder 3.17.0-beta3
• Elementor Website Builder 3.17.0-beta4
• Elementor Website Builder 3.17.0-dev1
• Elementor Website Builder 3.17.0-dev2
• Elementor Website Builder 3.17.0-dev3
• Elementor Website Builder 3.17.0-dev4
• Elementor Website Builder 3.17.1
• Elementor Website Builder 3.17.2
• Elementor Website Builder 3.17.3
• Elementor Website Builder 3.18.0
• Elementor Website Builder 3.18.0-beta1
• Elementor Website Builder 3.18.0-beta2
• Elementor Website Builder 3.18.0-beta3
• Elementor Website Builder 3.18.0-beta4
• Elementor Website Builder 3.18.0-dev1
• Elementor Website Builder 3.18.0-dev2
• Elementor Website Builder 3.18.0-dev3
• Elementor Website Builder 3.18.0-dev4
• Elementor Website Builder 3.18.1
• Elementor Website Builder 3.18.2
• Elementor Website Builder 3.18.3
• Elementor Website Builder 3.19.0
• Elementor Website Builder 3.19.0-beta1
• Elementor Website Builder 3.19.0-beta2
• Elementor Website Builder 3.19.0-beta3
• Elementor Website Builder 3.19.0-beta4
• Elementor Website Builder 3.19.0-beta5
• Elementor Website Builder 3.19.0-beta6
• Elementor Website Builder 3.19.0-dev1
• Elementor Website Builder 3.19.0-dev2
• Elementor Website Builder 3.19.0-dev3
• Elementor Website Builder 3.19.0-dev4
• Elementor Website Builder 3.19.0-dev5
• Elementor Website Builder 3.19.0-dev6