Wow Elements Addons For Elementor
Monthly
Server-side request forgery in the Wow Elements Addons for Elementor WordPress plugin (all versions up to and including 1.11.2) lets an authenticated attacker with Contributor-level access or higher coerce the site's web server into issuing HTTP requests to arbitrary attacker-chosen destinations. The flaw is in the plugin's Changelog widget, which passes the user-controlled 'Changelog File' setting directly into wp_remote_get() with no URL validation or sanitisation, allowing requests to be aimed at internal-only resources such as cloud metadata endpoints or intranet APIs. There is no confirmed active exploitation (not listed in CISA KEV) and no public exploit code identified at time of analysis; the Contributor authentication prerequisite and the bounded, low-level confidentiality/integrity/availability impact keep this a genuine but moderate-priority issue rather than an emergency patch item.
Server-side request forgery in the Wow Elements Addons for Elementor WordPress plugin (all versions up to and including 1.11.2) lets an authenticated attacker with Contributor-level access or higher coerce the site's web server into issuing HTTP requests to arbitrary attacker-chosen destinations. The flaw is in the plugin's Changelog widget, which passes the user-controlled 'Changelog File' setting directly into wp_remote_get() with no URL validation or sanitisation, allowing requests to be aimed at internal-only resources such as cloud metadata endpoints or intranet APIs. There is no confirmed active exploitation (not listed in CISA KEV) and no public exploit code identified at time of analysis; the Contributor authentication prerequisite and the bounded, low-level confidentiality/integrity/availability impact keep this a genuine but moderate-priority issue rather than an emergency patch item.