High · 7.1 CVE-2023-34370 EUVD-2023-38450GHSA-wg8r-283g-68mr

Server Side Request Forgery (SSRF) vulnerability in Starter Templates plugins

Published Mar 28, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Brainstorm Force Product: Premium Starter Templates Product: Starter Templates — Elementor, WordPress & Beaver Builder Templates Category: Web / CMS

Description

Server-Side Request Forgery (SSRF) vulnerability in Brainstorm Force Starter Templates — Elementor, WordPress & Beaver Builder Templates, Brainstorm Force Premium Starter Templates.This issue affects Starter Templates — Elementor, WordPress & Beaver Builder Templates: from n/a through 3.2.4; Premium Starter Templates: from n/a through 3.2.4.

Affected products

Vendor	Product	Affected	Fixed
Brainstorm Force	Starter Templates — Elementor, WordPress & Beaver Builder Templates	≤ 3.2.4	—
Brainstorm Force	Premium Starter Templates	≤ 3.2.4	—

References

https://patchstack.com/database/vulnerability/astra-pro-sites/wordpress-premium-starter-templates-plugin-3-2-4-server-side-request-forgery-ssrf-vulnerability?_s_id=cve vdb-entry
https://patchstack.com/database/vulnerability/astra-sites/wordpress-starter-templates-plugin-3-2-4-server-side-request-forgery-ssrf-vulnerability?_s_id=cve vdb-entry