CVE-2024-51665

CVE-2024-51665 Magical Addons For Elementor = 1.2.1 - 已认证（订阅者+）服务器端请求伪造 Description: Magical Addons For Elementor（页眉页脚构建器、免费Elementor小部件、Elementor模板库）WordPress插件在所有版本（包括1.2.1及以下）中存在服务器端请求伪造漏洞。这使得已通过身份验证的攻击者（拥有订阅者及以上级别访问权限）能够从Web应用程序向任意位置发起网络请求，从而查询和修改内部服务的信息。 root@kitploit: CVE: CVE-2024-51665...

PT-2025-17878 · WordPress · Shoplentor

Name of the Vulnerable Software and Affected Versions: The ShopLentor plugin for WordPress versions up to, and including, 3.1.2 Description: The issue allows unauthenticated attackers to make web requests to arbitrary locations originating from the web application, potentially querying and...