CVE-2023-51676

2023-12-2913:15:11

CWE-918

[email protected]

web.nvd.nist.gov

cve-2023-51676

server-side request forgery

ssrf

vulnerability

leevio happy addons

elementor

nvd

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.8 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.1%

JSON

Server-Side Request Forgery (SSRF) vulnerability in Leevio Happy Addons for Elementor.This issue affects Happy Addons for Elementor: from n/a through 3.9.1.1.

Affected configurations

Vulners

NVD

Node

leeviohappy_addons_for_elementorRange≤3.9.1.1

CPENameOperatorVersion
wedevs:happy_addons_for_elementorwedevs happy addons for elementorle3.9.1.1

CPE	Name	Operator	Version
wedevs:happy_addons_for_elementor	wedevs happy addons for elementor	le	3.9.1.1

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "happy-elementor-addons",
    "product": "Happy Addons for Elementor",
    "vendor": "Leevio",
    "versions": [
      {
        "changes": [
          {
            "at": "3.10.0",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "3.9.1.1",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/happy-elementor-addons/wordpress-happy-addons-for-elementor-plugin-3-9-1-1-server-side-request-forgery-ssrf-vulnerability?_s_id=cve