| |
Vulnerability CVE-2024-4404
Published: 2024-06-14
| Description: |
The ElementsKit PRO plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 3.6.2 via the 'render_raw' function. This can allow authenticated attackers, with contributor-level permissions and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. |
References: |
https://www.wordfence.com/threat-intel/vulnerabilities/id/6417269d-3d49-4f33-b92a-5aacb052bab0?source=cve
https://wpmet.com/plugin/elementskit/roadmaps/
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
