CVE-2024-51665: WordPress Magical Addons For Elementor plugin <= 1.2.1 - Server Side Request Forgery (SSRF) vulnerability
Published Nov 4, 2024
·Updated
Server-Side Request Forgery (SSRF) vulnerability in Noor Alam Magical Addons For Elementor magical-addons-for-elementor allows Server Side Request Forgery.This issue affects Magical Addons For Elementor: from n/a through <= 1.2.1.
Affected Software
1 affected component
Wpthemespace Magical Addons For Elementor Wordpress<1.2.3
Remediation
Information
Update to 1.2.3 or a higher version.
Event History
Nov 4, 2024
CVE Published
via MITRE·01:36 PM
Data Sourced
via MITRE·01:36 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Nov 10, 2024
Exploit Published
via GitHub·12:01 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-51665?
CVE-2024-51665 is categorized as a critical vulnerability due to the potential for Server-Side Request Forgery (SSRF).
2
How do I fix CVE-2024-51665?
To mitigate CVE-2024-51665, update the Magical Addons For Elementor plugin to version 1.2.3 or later.
3
What systems are affected by CVE-2024-51665?
CVE-2024-51665 affects all versions of Magical Addons For Elementor up to and including version 1.2.1.
4
What type of vulnerability is CVE-2024-51665?
CVE-2024-51665 is a Server-Side Request Forgery (SSRF) vulnerability.
5
Can CVE-2024-51665 lead to data leakage?
Yes, CVE-2024-51665 can potentially lead to data leakage and unauthorized access to internal resources.