Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/03/10 1:00 p.m.•25 views

CVE-2024-13924

The Starter Templates by FancyWP plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.0.0 via the 'httprequesthostisexternal' filter. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations...

9.1CVSS7AI score0.0043EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/08 1:15 p.m.•31 views

CVE-2024-13924

The Starter Templates by FancyWP plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.0.0 via the 'httprequesthostisexternal' filter. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations...

9.1CVSS0.0043EPSS
SaveExploits0References2
Circl
Circl
•added 2025/03/08 12:36 p.m.•25 views

CVE-2024-13924

creationtimestamp| type| source ---|---|--- 2025-03-08 12:36:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6945 2025-03-08 15:11:16+00:00| seen| https://t.me/cvedetector/19899 2025-03-08 16:29:02+00:00| seen| Telegram/HG0MGwIqq-n4i0Gf-FzKxnP20cW5N5XUKms6jqt4dgi5pDp...

9.1CVSS8.7AI score0.0043EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/03/08 12:21 p.m.•15 views

CVE-2024-13924 Starter Templates by FancyWP <= 2.0.0 - Unauthenticated Blind Server-Side Request Forgery

The Starter Templates by FancyWP plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.0.0 via the 'httprequesthostisexternal' filter. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations...

5.3CVSS5.3AI score0.0043EPSS
SaveExploits0References2
CVE
CVE
•added 2025/03/08 12:21 p.m.•78 views

CVE-2024-13924

CVE-2024-13924 affects Starter Templates by FancyWP (WordPress plugin) up to version 2.0.0, enabling unauthenticated Blind Server-Side Request Forgery via the http_request_host_is_external filter. This SSRF could let an attacker make web requests from the vulnerable WordPress instance to arbitrar...

9.1CVSS5.3AI score0.0043EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2025/03/08 12:21 p.m.•40 views

CVE-2024-13924 Starter Templates by FancyWP <= 2.0.0 - Unauthenticated Blind Server-Side Request Forgery

The Starter Templates by FancyWP plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.0.0 via the 'httprequesthostisexternal' filter. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations...

5.3CVSS0.0043EPSS
SaveExploits0References2
Rows per page
Query Builder