CyberSecBulletin

FancyWP vulnerabilities

We track 2 vulnerabilities in FancyWP products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 8, 2025.

2vulnerabilities
2critical
0high
0exploited
9.3average CVSS score

Latest FancyWP vulnerabilities

  • 9.1 Critical severity

    Starter Templates by FancyWP: Server-Side Request Forgery

    CVE-2024-13924FancyWP

    The Starter Templates by FancyWP plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.0.0 via the 'http_request_host_is_external' filter. This makes it possible for unauthenticated attackers to make we

  • 9.6 Critical severity

    Starter Templates by FancyWP: Cross-Site Request Forgery

    CVE-2025-25106FancyWP

    Cross-Site Request Forgery (CSRF) vulnerability in FancyWP Starter Templates by FancyWP starter-templates allows Cross Site Request Forgery.This issue affects Starter Templates by FancyWP: from n/a through <= 2.0.0.