CVE-2024-38730: WordPress Magical Addons For Elementor plugin <= 1.1.41 - Server Side Request Forgery (SSRF) vulnerability
Published Jul 22, 2024
·Updated
Server-Side Request Forgery (SSRF) vulnerability in Noor alam Magical Addons For Elementor.This issue affects Magical Addons For Elementor: from n/a through 1.1.41.
Affected Software
1 affected component
Wpthemespace Magical Addons For Elementor Wordpress<1.1.42
Remediation
Information
Update to 1.1.42 or a higher version.
Event History
Jul 22, 2024
CVE Published
via MITRE·10:21 AM
Data Sourced
via MITRE·10:21 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-38730?
CVE-2024-38730 is classified as a Server-Side Request Forgery (SSRF) vulnerability.
2
How do I fix CVE-2024-38730?
To fix CVE-2024-38730, please update Magical Addons For Elementor to version 1.1.42 or later.
3
Which versions of Magical Addons For Elementor are affected by CVE-2024-38730?
CVE-2024-38730 affects Magical Addons For Elementor versions prior to 1.1.42.
4
What potential impact does CVE-2024-38730 have on my website?
If exploited, CVE-2024-38730 could allow an attacker to perform unauthorized actions by manipulating server-side requests.
5
Is CVE-2024-38730 specific to certain environments?
CVE-2024-38730 specifically affects the Magical Addons For Elementor plugin running on WordPress.