CVE Database /
CVE-2024-1467
CVE · Medium
CVE-2024-1467 — Starter Templates – AI-Powered Templates for Elementor & Gutenberg [astra-sites] < 4.1.7
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-1467
|
Starter Templates – AI-Powered Templates for Elementor & Gutenberg [astra-sites] < 4.1.7 |
Server-Side Request Forgery (SSRF) |
Medium
4.3
|
< 4.1.7
|
4.1.7 |
2024-05-08 |
—
|
CVE-2024-1467
The Starter Templates plugin for WordPress contains a server-side request forgery vulnerability affecting versions up to 4.1.6 in the ai_api_request() function. Attackers with contributor-level permissions or higher can exploit this flaw to send web requests from the application to arbitrary destinations, potentially allowing them to access or alter data on internal services. The vulnerability was fixed in version 4.1.7.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings