CVE-2024-13924

CVE-2024-13924 affects Starter Templates by FancyWP (WordPress plugin) up to version 2.0.0, enabling unauthenticated Blind Server-Side Request Forgery via the http_request_host_is_external filter. This SSRF could let an attacker make web requests from the vulnerable WordPress instance to arbitrar...

CVE-2024-13924 Starter Templates by FancyWP <= 2.0.0 - Unauthenticated Blind Server-Side Request Forgery

The Starter Templates by FancyWP plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.0.0 via the 'httprequesthostisexternal' filter. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations...

CVE-2024-13924 Starter Templates by FancyWP <= 2.0.0 - Unauthenticated Blind Server-Side Request Forgery

The Starter Templates by FancyWP plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.0.0 via the 'httprequesthostisexternal' filter. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations...

WordPress plugin Starter Templates by FancyWP 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

MAL-2025-1622 Malicious code in ragbot-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61930f6fe18511dccf487d70fe3709eb3eda7cb06f67c342e8cd6c79553c033e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ragbot-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61930f6fe18511dccf487d70fe3709eb3eda7cb06f67c342e8cd6c79553c033e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-25106

Cross-Site Request Forgery CSRF vulnerability in FancyWP Starter Templates by FancyWP starter-templates allows Cross Site Request Forgery.This issue affects Starter Templates by FancyWP: from n/a through = 2.0.0...

CVE-2025-25106

Cross-Site Request Forgery CSRF vulnerability in FancyWP Starter Templates by FancyWP starter-templates allows Cross Site Request Forgery.This issue affects Starter Templates by FancyWP: from n/a through = 2.0.0...

CVE-2025-25106 WordPress Starter Templates by FancyWP plugin <= 2.0.0 - CSRF to Arbitrary Plugin Installation vulnerability

Cross-Site Request Forgery CSRF vulnerability in FancyWP Starter Templates by FancyWP allows Cross Site Request Forgery. This issue affects Starter Templates by FancyWP: from n/a through 2.0.0...

CVE-2025-25106

CVE-2025-25106 is a CSRF vulnerability in the WordPress plugin Starter Templates by FancyWP (affected: versions up to 2.0.0). The CVE entry indicates an attacker could exploit CSRF to perform arbitrary plugin installation . The Wordfence/WordPress vulnerability data show this entry is currently U...

CVE-2025-25106 WordPress Starter Templates by FancyWP plugin <= 2.0.0 - CSRF to Arbitrary Plugin Installation vulnerability

Cross-Site Request Forgery CSRF vulnerability in FancyWP Starter Templates by FancyWP starter-templates allows Cross Site Request Forgery.This issue affects Starter Templates by FancyWP: from n/a through = 2.0.0...

WordPress plugin Starter Templates by FancyWP 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

PT-2025-5935 · WordPress · Fancywp Starter Templates

Name of the Vulnerable Software and Affected Versions: FancyWP Starter Templates versions n/a through 2.0.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows unauthorized Cross Site Request Forgery. This vulnerability affects FancyWP Starter Templates, enabli...

CVE-2024-44003

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in spicethemes Spice Starter Sites spice-starter-sites allows Reflected XSS.This issue affects Spice Starter Sites: from n/a through = 1.2.5...

Malicious code in starter-monorepo-microservices (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-871 Malicious code in starter-monorepo-microservices (npm)

--- -= Per source details. Do not edit below this line.=-...

WordPress Starter Templates by FancyWP plugin <= 2.0.0 - CSRF to Arbitrary Plugin Installation vulnerability

CSRF to Arbitrary Plugin Installation vulnerability discovered by Abdi Pranata in WordPress Plugin Starter Templates by FancyWP versions = 2.0.0...

Malicious code in ppcp-starter-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90fda43d3ca785bdaecbd26f9143892e80c2dc56f94e46c333ea5b60b32da983 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1169 Malicious code in ppcp-starter-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90fda43d3ca785bdaecbd26f9143892e80c2dc56f94e46c333ea5b60b32da983 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Starter Templates by FancyWP plugin <= 2.0.0 - Unauthenticated Blind Server-Side Request Forgery vulnerability

Unauthenticated Blind Server-Side Request Forgery vulnerability discovered by Francesco Carlucci in WordPress Plugin Starter Templates by FancyWP versions = 2.0.0...