CVE-2024-1467 Starter Templates — Elementor, WordPress & Beaver Builder Templates <= 4.1.6 - Authenticated (Contributor+) Server-Side Request Forgery

The Starter Templates — Elementor, WordPress & Beaver Builder Templates plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.1.6 via the aiapirequest. This makes it possible for authenticated attackers, with contributor-level access and above, ...

WordPress Starter Templates plugin <= 4.1.6 - Authenticated (Contributor+) Server-Side Request Forgery vulnerability

Authenticated Contributor+ Server-Side Request Forgery vulnerability discovered by Lucio Sá in WordPress Plugin Starter Templates versions = 4.1.6...

WordPress Starter Templates Plugin <= 4.1.6 is vulnerable to Server Side Request Forgery (SSRF)

Software Starter Templates Type Plugin Vulnerable versions = 4.1.6 Fixed in 4.1.7 OWASP Top 10 A1: Injection Classification Server Side Request Forgery SSRF CVE CVE-2024-1467 Patch priority Low CVSS severity Low 4.9 Developer Claim ownership PSID f703c4115837 Credits Lucio Sá Required privilege...

PT-2024-18071

Name of the Vulnerable Software and Affected Versions The Starter Templates — Elementor, WordPress & Beaver Builder Templates plugin for WordPress versions up to, and including, 4.1.6 Description The issue allows authenticated attackers with contributor-level access and above to perform Server-Si...

app.cash.lilbitcoinj:lilbitcoinj-core (>=0.0.2, <=0.0.3), app.cash.lninvoice:ln-invoice (>=0.0.1, <=0.0.6) +1351 more potentially affected by CVE-2024-34447 via org.bouncycastle:bcprov-jdk15to18 (>=1.63, <=1.77)

org.bouncycastle:bcprov-jdk15to18 MAVEN version =1.63, =0.0.2, =0.0.1, =0.2.9, =0.1.0, =0.2.1, =0.2.0, =1.0.0, =1.0.1-rc14, =0.2.0, =0.2.0, =1.0.0.release, =1.0.20.release - cn.hermesdi:api-crypto-spring-boot-starter 1.0.0.release and more Source cves: CVE-2024-34447 Source advisory:...

CVE-2024-25568

OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent unauthenticated attacker to execute arbitrary OS commands by sending a specially crafted request to the product. Affected products and versions are as follows: WRC-X3200GST3-B v1.25 and earlier, WRC-G01-W...

org.bonitasoft.connectors:bonita-connector-rest (>=1.4.0, <=1.5.1), org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.14.0) +3 more potentially affected by CVE-2024-27609 via org.bonitasoft.platform:platform-resources (7.14.0)

org.bonitasoft.platform:platform-resources MAVEN version 7.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.platform:platform-resources and may be impacted: - org.bonitasoft.connectors:bonita-connector-rest =1.4.0, =1.5.1 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.12.1), org.bonitasoft.engine:bonita-engine-standalone (7.12.1) +2 more potentially affected by CVE-2024-27609 via org.bonitasoft.platform:platform-resources (7.12.1)

org.bonitasoft.platform:platform-resources MAVEN version 7.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.platform:platform-resources and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.12.1 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.11.4), org.bonitasoft.engine:bonita-engine-standalone (7.11.4) +2 more potentially affected by CVE-2024-27609 via org.bonitasoft.platform:platform-resources (7.11.4)

org.bonitasoft.platform:platform-resources MAVEN version 7.11.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.platform:platform-resources and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.11.4 -...

CVE-2023-34370 Server Side Request Forgery (SSRF) vulnerability in Starter Templates plugins

Server-Side Request Forgery SSRF vulnerability in Brainstorm Force Starter Templates — Elementor, WordPress & Beaver Builder Templates, Brainstorm Force Premium Starter Templates.This issue affects Starter Templates — Elementor, WordPress & Beaver Builder Templates: from n/a through 3.2.4; Premiu...

CVE-2023-34370 Server Side Request Forgery (SSRF) vulnerability in Starter Templates plugins

Server-Side Request Forgery SSRF vulnerability in Brainstorm Force Starter Templates — Elementor, WordPress & Beaver Builder Templates, Brainstorm Force Premium Starter Templates.This issue affects Starter Templates — Elementor, WordPress & Beaver Builder Templates: from n/a through 3.2.4; Premiu...

CVE-2023-34370: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in Brainstorm Force Starter Templates — Elementor, WordPress & Beaver Builder Templates, Brainstorm Force Premium Starter Templates.This issue affects Starter Templates — Elementor, WordPress & Beaver Builder Templates: from n/a through 3.2.4; Premiu...

PT-2024-12475 · Elementor +2 · Elementor +3

Name of the Vulnerable Software and Affected Versions: Brainstorm Force Starter Templates — Elementor, WordPress & Beaver Builder Templates versions 3.2.4 and earlier Brainstorm Force Premium Starter Templates versions 3.2.4 and earlier Description: A Server-Side Request Forgery SSRF issue affect...

ai.foremast.metrics:foremast-spring-boot-15x-starter (0.1.8), com.apigee.edge.config:apigee-config-maven-plugin (>=1.3, <=2.2.2) +337 more potentially affected by CVE-2024-22259 via org.springframework:spring-web (4.3.20.release)

org.springframework:spring-web MAVEN version 4.3.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - ai.foremast.metrics:foremast-spring-boot-15x-starter 0.1.8 -...

cn.aradin:aradin-cluster-zookeeper-starter (>=1.1.1, <=1.1.2), cn.aradin:aradin-lucene-solr-starter (>=1.1.1, <=1.1.2) +526 more potentially affected by CVE-2024-23944 via org.apache.zookeeper:zookeeper (>=3.9.0, <=3.9.1)

org.apache.zookeeper:zookeeper MAVEN version =3.9.0, =1.1.1, =1.1.1, =1.1.1, =1.1.1, =1.1.1, =2.1.1, =15.1-release, =15.0-release, =2.03-release, =3.3.0.4.0.6, =3.3.0.4.0.5, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.6.9, =2.10.6.10 and more Source cves: CVE-2024-23944 Source advisory:...

com.kfyty:kfyty-boot-starter-tomcat (1.0.0), com.kfyty:loveqq-boot-starter-tomcat (>=1.0.0, <=1.0.9) +10 more potentially affected by CVE-2024-24549 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.0-m16)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =1.0.0, =1.1.3, =1.1.3, =1.1.3, =1.1.2-snapshots, =1.1.2-snapshots, =1.1.2-snapshots, =11.0.0-m1, =11.0.0-m1, =11.0.0-m16 Source cves: CVE-2024-24549 Source advisory: GHSA-7W75-32CG-R6G2...

com.kfyty:kfyty-boot-starter-tomcat (1.0.0), com.kfyty:loveqq-boot-starter-tomcat (>=1.0.0, <=1.0.9) potentially affected by CVE-2024-23672 via org.apache.tomcat.embed:tomcat-embed-websocket (11.0.0-m15)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version 11.0.0-m15 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-websocket and may be impacted: - com.kfyty:kfyty-boot-starter-tomcat 1.0.0 -...

CVE-2024-23910

Cross-site request forgery CSRF vulnerability in ELECOM wireless LAN routers and wireless LAN repeater allows a remote unauthenticated attacker to hijack the authentication of administrators and to perform unintended operations to the affected product. Note that WMC-X1800GST-B and WSC-X1800GS-B a...

CVE-2024-21798

ELECOM wireless LAN routers contain a cross-site scripting vulnerability. Assume that a malicious administrative user configures the affected product with specially crafted content. When another administrative user logs in and operates the product, an arbitrary script may be executed on the web...

CVE-2024-25579

OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to the product. Note that WMC-X1800GST-B is also included in e-Mesh Starter Kit "WMC-2LX-B"...