CVERadar

CVE-2024-38730

High Severity

Wpthemespace

SVRS

60/100

CVSSv3

6.4/10

EPSS

0.00044/1

CVE-2024-38730: Server-Side Request Forgery (SSRF) vulnerability impacts the Magical Addons For Elementor plugin. This flaw allows an attacker to make the server issue requests to unintended locations, potentially exposing sensitive internal resources or allowing unauthorized actions. Magical Addons For Elementor versions up to 1.1.41 are affected. With a CVSS score of 6.4 and an SVRS of 60, while not critical, this vulnerability still poses a significant risk. Exploitation could lead to data breaches, internal network scanning, or service disruption. Although the SVRS is not above 80, indicating immediate action, mitigation steps are still recommended to protect against potential threats. Users of Magical Addons For Elementor should update to a patched version as soon as possible to address this vulnerability.

Indicators of Compromise

No IOCs found for this CVE

Exploits

No exploits found for this CVE

Enhance Your CVE Management with SOCRadar Vulnerability Intelligence

Get comprehensive CVE details, real-time notifications, and proactive threat management all in one platform.

CREATE FREE ACCOUNT

CVE Details

Access comprehensive CVE information instantly

Real-time Tracking

Subscribe to CVEs and get instant updates

Exploit Analysis

Monitor related APT groups and threats

IOC Tracking

Analyze and track CVE-related IOCs

News

CVE-2024-38730 | Noor Alam Magical Addons For Elementor Plugin up to 1.1.41 on WordPress server-side request forgery

vuldb.com2024-07-22

CVE-2024-38730 | Noor Alam Magical Addons For Elementor Plugin up to 1.1.41 on WordPress server-side request forgery | A vulnerability was found in Noor Alam Magical Addons For Elementor Plugin up to 1.1.41 on WordPress. It has been classified as critical. This affects an unknown part. The manipulation leads to server-side request forgery. This vulnerability is uniquely identified as CVE-2024-38730. It is possible to initiate the

cve-2024-38730

domains

urls

cves

Social Media

Vulmon Vulnerability Feed

@VulmonFeeds

2024-07-22

CVE-2024-38730 SSRF Vulnerability in Noor alam's Magical Addons For Elementor A Server-Side Request Forgery (SSRF) vulnerability is present in Noor alam's Magical Addons For Elementor. This problem affects versio... https://t.co/wjMnoUTEE8

CVE

@CVEnew

2024-07-22

CVE-2024-38730 Server-Side Request Forgery (SSRF) vulnerability in Noor alam Magical Addons For Elementor.This issue affects Magical Addons For Elementor: from n/a through 1.1.41. https://t.co/xLOjo3Mian

Affected Software

Configuration 1

Type	Vendor	Product
App	Wpthemespace	magical_addons_for_elementor

References

Reference	Link
[email protected]	https://patchstack.com/database/vulnerability/magical-addons-for-elementor/wordpress-magical-addons-for-elementor-plugin-1-1-40-server-side-request-forgery-ssrf-vulnerability?_s_id=cve

CWE Details

CWE ID	CWE Name	Description
CWE-918	Server-Side Request Forgery (SSRF)	The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

CVE Radar

Real-time CVE Intelligence & Vulnerability Management Platform

CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.

Get Free Vulnerability Intelligence AccessAccess real-time CVE monitoring, exploit analysis, and threat intelligence