Starter Templates <= 3.2.4 - Authenticated (Contributor+) Server-Side Request Forgery
medium
The Starter Templates (free and premium) plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 3.2.4 via the remote_request. This can allow authenticated attackers, with contributor-level access and above, to make web requests to arbitrary locations originating from the web...
- CVSS:
- 6.4
- Affected:
- up to 3.2.4
- Fixed in:
- 3.2.5
- Disclosed:
- Sep 5, 2023
CVE-2023-41804 on NVD →
Starter Templates <= 3.2.5 - Incorrect Authorization
medium
The Starter Templates (free and premium) plugin for WordPress is vulnerable to unauthorized modification of data due to an incorrect capability check on the sse_import() function in versions up to, and including, 3.2.5. This makes it possible for authenticated attackers, with contributor-level access and above, to impo...
- CVSS:
- 4.3
- Affected:
- up to 3.2.5
- Fixed in:
- 3.2.6
- Disclosed:
- Sep 5, 2023
CVE-2023-41805 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database