Lucene search

K
patchstackDave Jong (Patchstack)PATCHSTACK:4E784804A06055727ED81B6286DD5B3D
HistoryApr 25, 2024 - 12:00 a.m.

WordPress Piotnet Addons For Elementor Pro Plugin <= 7.1.17 is vulnerable to Server Side Request Forgery (SSRF)

2024-04-2500:00:00
Dave Jong (Patchstack)
patchstack.com
wordpress piotnet addons
elementor pro plugin
server side request forgery
vulnerable version
injection
cve-2024-33634
low severity
unauthenticated access

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N

AI Score

6.9

Confidence

Low

Software

Piotnet Addons For Elementor Pro

Type

Plugin

Vulnerable versions

<= 7.1.17

Fixed in

N/A

OWASP Top 10

A3: Injection

Classification

Server Side Request Forgery (SSRF)

CVE

CVE-2024-33634

Patch priority

Low

CVSS severity

Low (5.4)

Developer

Claim ownership

PSID

fd220e386df6

Credits

Dave Jong Patchstack Dave Jong (Patchstack)

Required privilege

Unauthenticated

Published

25 April, 2024

Remove and replace plugin Expand full details Have additional information or questions about this entry? Let us know.

Solution

This security issue has a low severity impact and is unlikely to be exploited.

Affected configurations

Vulners
Node
piotnetpiotnet_addonsRange7.1.17wordpress
VendorProductVersionCPE
piotnetpiotnet_addons*cpe:2.3:a:piotnet:piotnet_addons:*:*:*:*:*:wordpress:*:*

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N

AI Score

6.9

Confidence

Low

Related for PATCHSTACK:4E784804A06055727ED81B6286DD5B3D