Vulnerability · Published Mar 28, 2024 · Assigned by Patchstack
CVE-2023-34370Server Side Request Forgery (SSRF) vulnerability in Starter Templates plugins
High 7.1
In plain English
A high-severity server-side request forgery in Premium Starter Templates from Brainstorm Force. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities).
Official description
Server-Side Request Forgery (SSRF) vulnerability in Brainstorm Force Starter Templates — Elementor, WordPress & Beaver Builder Templates, Brainstorm Force Premium Starter Templates.This issue affects Starter Templates — Elementor, WordPress & Beaver Builder Templates: from n/a through 3.2.4; Premium Starter Templates: from n/a through 3.2.4.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Brainstorm Force | Starter Templates — Elementor, WordPress & Beaver Builder Templates | n/a – through 3.2.4 |
| Brainstorm Force | Premium Starter Templates | n/a – through 3.2.4 |
Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N
References
- https://patchstack.com/database/vulnerability/astra-pro-sites/wordpress-premium-starter-templates-plugin-3-2-4-server-side-request-forgery-ssrf-vulnerability?_s_id=cve vdb-entry
- https://patchstack.com/database/vulnerability/astra-sites/wordpress-starter-templates-plugin-3-2-4-server-side-request-forgery-ssrf-vulnerability?_s_id=cve vdb-entry