{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-1641","assignerOrgId":"b15e7b5b-3da4-40ae-a43c-f7aa60e62599","state":"PUBLISHED","assignerShortName":"Wordfence","dateReserved":"2026-01-29T18:17:44.069Z","datePublished":"2026-09-19T07:43:17.803Z","dateUpdated":"2026-09-19T14:01:22.660Z"},"containers":{"cna":{"providerMetadata":{"orgId":"b15e7b5b-3da4-40ae-a43c-f7aa60e62599","shortName":"Wordfence","dateUpdated":"2026-09-19T07:43:17.803Z"},"affected":[{"vendor":"wowelements","product":"Wow Elements Addons for Elementor","versions":[{"version":"0","status":"affected","lessThanOrEqual":"1.11.2","versionType":"semver"}],"defaultStatus":"unaffected"}],"descriptions":[{"lang":"en","value":"The Wow Elements Addons for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.11.2. This is due to the plugin passing user-controlled input from the 'Changelog File' setting directly to the wp_remote_get function without adequate validation or sanitization of the URL. This makes it possible for authenticated attackers, with Contributor-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services."}],"title":"Wow Elements Addons for Elementor <= 1.11.2 - Authenticated (Contributor+) Server-Side Request Forgery via Changelog File Setting","references":[{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8ded7bd6-3dd8-4659-9704-f197e7c2f941?source=cve"},{"url":"https://plugins.trac.wordpress.org/browser/wow-elements-addons-for-elementor/trunk/includes/widgets/changelog.php#L786"},{"url":"https://plugins.trac.wordpress.org/browser/wow-elements-addons-for-elementor/tags/1.5.6/includes/widgets/changelog.php#L786"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3583568%40wow-elements-addons-for-elementor&new=3583568%40wow-elements-addons-for-elementor"}],"problemTypes":[{"descriptions":[{"lang":"en","description":"CWE-918 Server-Side Request Forgery (SSRF)","cweId":"CWE-918","type":"CWE"}]}],"metrics":[{"cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","baseScore":6.5,"baseSeverity":"MEDIUM"}}],"credits":[{"lang":"en","type":"finder","value":"Athiwat Tiprasaharn (Jitlada)"},{"lang":"en","type":"finder","value":"Itthidej Aramsri (Boeing777)"},{"lang":"en","type":"finder","value":"Waris Damkham"}],"timeline":[{"time":"2026-09-18T19:31:31.000Z","lang":"en","value":"Disclosed"}]},"adp":[{"metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-1641","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-19T13:23:12.285133Z"}}}],"title":"CISA ADP Vulnrichment","providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-19T14:01:22.660Z"}}]}}