Lucene search

K
cvelistPatchstackCVELIST:CVE-2023-39313
HistoryMar 28, 2024 - 5:56 a.m.

CVE-2023-39313 WordPress Avada theme <= 7.11.1 - Authenticated Server Side Request Forgery (SSRF) vulnerability

2024-03-2805:56:39
CWE-918
Patchstack
www.cve.org
cve-2023-39313
wordpress
avada
ssrf
vulnerability
themefusion

7.7 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Server-Side Request Forgery (SSRF) vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Avada",
    "vendor": "ThemeFusion",
    "versions": [
      {
        "changes": [
          {
            "at": "7.11.2",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "7.11.1",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

7.7 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for CVELIST:CVE-2023-39313