Vulnerabilities

TI-2024-12943 CVE-2024-13924 · GHSA-675c-c9wm-rqq6

Starter Templates by FancyWP <= 2.0.0 - Unauthenticated Blind Server-Side Request Forgery

MEDIUM 46

The Starter Templates by FancyWP plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.0.0 via the 'http_request_host_is_external' filter.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0043 Published 2025-03-08 No fix listed CWE-918

TI-2025-18775 CVE-2025-25106 · GHSA-fv77-c69f-c4pj

WordPress Starter Templates by FancyWP plugin <= 2.0.0 - CSRF to Arbitrary Plugin Installation vulnerability

MEDIUM 42

Cross-Site Request Forgery (CSRF) vulnerability in FancyWP Starter Templates by FancyWP starter-templates allows Cross Site Request Forgery.This issue affects Starter Templates by FancyWP: from n/a through <= 2.0.0.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00236 Published 2025-02-07 No fix listed CWE-352

Vulnerabilities

Filters

Starter Templates by FancyWP <= 2.0.0 - Unauthenticated Blind Server-Side Request Forgery

WordPress Starter Templates by FancyWP plugin <= 2.0.0 - CSRF to Arbitrary Plugin Installation vulnerability