Lucene search

WordfenceCVE-2024-4404

HistoryJun 14, 2024 - 6:15 a.m.

CVE-2024-4404

2024-06-1406:15:12

Wordfence

web.nvd.nist.gov

elementskit

wordpress

server-side request forgery

vulnerability

version 3.6.2

render_raw

authenticated attackers

contributor-level permissions

web requests

CVSS3

8.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N

AI Score

8.3

Confidence

High

EPSS

0.001

Percentile

18.1%

JSON

The ElementsKit PRO plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 3.6.2 via the ‘render_raw’ function. This can allow authenticated attackers, with contributor-level permissions and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.

Affected configurations

Vulners

Node

wpmetelementskitRange≤3.6.2prowordpress

VendorProductVersionCPE
wpmetelementskit*cpe:2.3:a:wpmet:elementskit:*:*:*:*:pro:wordpress:*:*

Vendor	Product	Version	CPE
wpmet	elementskit	*	cpe:2.3:a:wpmet:elementskit:::::pro:wordpress::

CNA Affected

[
  {
    "vendor": "wpmet",
    "product": "ElementsKit Pro",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "3.6.2",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

wpmet.com/plugin/elementskit/roadmaps/

www.wordfence.com/threat-intel/vulnerabilities/id/6417269d-3d49-4f33-b92a-5aacb052bab0?source=cve

CVSS3

8.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N

AI Score

8.3

Confidence

High

EPSS

0.001

Percentile

18.1%

JSON

Related for CVE-2024-4404