Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbWpvulndbWPVDB-ID:C96207A7-D46A-447B-BACE-D909CC7E204B
HistoryJan 30, 2024 - 12:00 a.m.

Avada < 7.11.2 - Contributor+ SSRF

2024-01-3000:00:00
wpscan.com
8
avada theme
ssrf
contributor role

AI Score

6.5

Confidence

High

EPSS

0

Percentile

9.0%

JSON

Description The theme does not validate a parameter before making a request to it, which could allow users with a role as low as Contributor to perform SSRF attacks

Related

cve 1
cvelist 1
vulnrichment 1
nvd 1
wordfence 1
cve
cve
CVE-2023-39313
2024-03-28 06:15:09
cvelist
cvelist
CVE-2023-39313 WordPress Avada theme <= 7.11.1 - Authenticated Server Side Request Forgery (SSRF) vulnerability
2024-03-28 05:56:39
vulnrichment
vulnrichment
CVE-2023-39313 WordPress Avada theme <= 7.11.1 - Authenticated Server Side Request Forgery (SSRF) vulnerability
2024-03-28 05:56:39
nvd
nvd
CVE-2023-39313
2024-03-28 06:15:09
wordfence
wordfence
Wordfence Intelligence Weekly WordPress Vulnerability Report (August 7, 2023 to August 13, 2023)
2023-08-17 13:45:31

AI Score

6.5

Confidence

High

EPSS

0

Percentile

9.0%

JSON
Related for WPVDB-ID:C96207A7-D46A-447B-BACE-D909CC7E204B
cve1cvelist1vulnrichment1nvd1wordfence1