Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2025/12/19 1:9 p.m.3 views

CVE-2025-14277

The Prime Slider – Addons for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.9 via the importelementortemplate AJAX action. This makes it possible for authenticated attackers, with subscriber level access and above, to make we...

4.3CVSS5.8AI score0.00279EPSS
Exploits0References1
NVD
NVD
added 2025/12/18 1:15 p.m.4 views

CVE-2025-14277

The Prime Slider – Addons for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.9 via the importelementortemplate AJAX action. This makes it possible for authenticated attackers, with subscriber level access and above, to make we...

4.3CVSS0.00279EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/12/18 12:22 p.m.21 views

CVE-2025-14277 Prime Slider – Addons for Elementor <= 4.0.9 - Authenticated (Subscriber+) Server-Side Request Forgery

The Prime Slider – Addons for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.9 via the importelementortemplate AJAX action. This makes it possible for authenticated attackers, with subscriber level access and above, to make we...

4.3CVSS0.00279EPSS
Exploits0References2
CVE
CVE
added 2025/12/18 12:22 p.m.6 views

CVE-2025-14277

Technical details about CVE-2025-14277 (SSRF in Prime Slider Addons for Elementor) are not publicly provided in the supplied documents; monitor for updates.

4.3CVSS5.4AI score0.00279EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/18 12:22 p.m.3 views

CVE-2025-14277 Prime Slider – Addons for Elementor <= 4.0.9 - Authenticated (Subscriber+) Server-Side Request Forgery

The Prime Slider – Addons for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.9 via the importelementortemplate AJAX action. This makes it possible for authenticated attackers, with subscriber level access and above, to make we...

4.3CVSS5.4AI score0.00279EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/10/20 12:0 a.m.2 views

WordPress plugin Element Pack Addons for Elementor 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A code issue...

5CVSS6.7AI score0.00199EPSS
Exploits0References3
Rows per page
Query Builder