Vulnerabilities > Wpmet > Elementskit > Critical

DATE CVE VULNERABILITY TITLE RISK
2024-06-14 CVE-2024-4404 Server-Side Request Forgery (SSRF) vulnerability in Wpmet Elementskit
The ElementsKit PRO plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 3.6.2 via the 'render_raw' function.
network
low complexity
wpmet CWE-918
critical
9.6