CVE-2025-14277

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-14277", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-12-08T16:58:57.189Z", "datePublished": "2025-12-18T12:22:26.139Z", "dateUpdated": "2026-04-08T16:33:48.365Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:33:48.365Z"}, "affected": [{"vendor": "bdthemes", "product": "Prime Slider \u2013 Addons for Elementor", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "4.0.9", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Prime Slider \u2013 Addons for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.9 via the import_elementor_template AJAX action. This makes it possible for authenticated attackers, with subscriber level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services."}], "title": "Prime Slider \u2013 Addons for Elementor <= 4.0.9 - Authenticated (Subscriber+) Server-Side Request Forgery", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/069a56a1-ca17-43cc-a51f-51b6111f5b61?source=cve"}, {"url": "https://plugins.trac.wordpress.org/changeset/3419222/bdthemes-prime-slider-lite"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-918 Server-Side Request Forgery (SSRF)", "cweId": "CWE-918", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "baseScore": 4.3, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "Deadbee"}], "timeline": [{"time": "2025-12-02T00:00:00.000Z", "lang": "en", "value": "Discovered"}, {"time": "2025-12-08T17:14:48.000Z", "lang": "en", "value": "Vendor Notified"}, {"time": "2025-12-17T23:36:23.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-12-18T14:36:06.650013Z", "id": "CVE-2025-14277", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-18T14:36:18.403Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-14277", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-12-18T14:36:06.650013Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-18T14:36:11.825Z"}}], "cna": {"title": "Prime Slider \u2013 Addons for Elementor <= 4.0.9 - Authenticated (Subscriber+) Server-Side Request Forgery", "credits": [{"lang": "en", "type": "finder", "value": "Deadbee"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"}}], "affected": [{"vendor": "bdthemes", "product": "Prime Slider \u2013 Addons for Elementor", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "4.0.9"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-12-02T00:00:00.000Z", "value": "Discovered"}, {"lang": "en", "time": "2025-12-08T17:14:48.000Z", "value": "Vendor Notified"}, {"lang": "en", "time": "2025-12-17T23:36:23.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/069a56a1-ca17-43cc-a51f-51b6111f5b61?source=cve"}, {"url": "https://plugins.trac.wordpress.org/changeset/3419222/bdthemes-prime-slider-lite"}], "descriptions": [{"lang": "en", "value": "The Prime Slider \u2013 Addons for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.9 via the import_elementor_template AJAX action. This makes it possible for authenticated attackers, with subscriber level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-918", "description": "CWE-918 Server-Side Request Forgery (SSRF)"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:33:48.365Z"}}}, "cveMetadata": {"cveId": "CVE-2025-14277", "state": "PUBLISHED", "dateUpdated": "2026-04-08T16:33:48.365Z", "dateReserved": "2025-12-08T16:58:57.189Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-12-18T12:22:26.139Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Prime Slider \u2013 Addons for Elementor", "vendor": "bdthemes", "versions": [{"lessThanOrEqual": "4.0.9", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Prime Slider \u2013 Addons for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.9 via the import_elementor_template AJAX action. This makes it possible for authenticated attackers, with subscriber level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services."}], "id": "CVE-2025-14277", "lastModified": "2026-06-17T08:35:39.570", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-14277", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-12-18T14:36:06.650013Z", "version": "2.0.3"}}]}, "published": "2025-12-18T13:15:47.227", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/changeset/3419222/bdthemes-prime-slider-lite"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/069a56a1-ca17-43cc-a51f-51b6111f5b61?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-918"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-22T20:20:31.817639+00:00", "value": {"mitigation_remediation": ["Upgrade Prime Slider \u2013 Addons for Elementor to a version newer than 4.0.9", "Restrict or remove the import_elementor_template capability from subscriber and lower roles using a role\u2011management or capability plugin", "Monitor and audit WordPress AJAX logs for unexpected import_elementor_template calls and block suspicious external requests via a firewall or security plugin"], "summary": {"action": "Patch", "impact": "Server\u2011Side Request Forgery"}, "threat_synthesis": {"affected_systems": "The affected product is bdthemes Prime Slider \u2013 Addons for Elementor plugin for WordPress, versions up to and including 4.0.9. Protection is required for sites that deploy these versions, especially when subscribers or higher roles are present.", "description_and_impact": "The Prime Slider \u2013 Addons for Elementor plugin allows a Server\u2011Side Request Forgery that is triggered by the import_elementor_template AJAX action. An authenticated user with subscriber level or higher can cause the web application to send HTTP requests to arbitrary destinations, potentially accessing internal network services and reading or modifying sensitive data. This vulnerability is classified as CWE\u2011918 and enables indirect external interaction from within the website's context.", "risk_and_exploitability": "The CVSS score of 4.3 indicates moderate severity, and the EPSS score of less than 1% suggests a very low likelihood of discovery and exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog, indicating no known large\u2011scale active exploitation. Attackers must first authenticate with subscriber or higher privileges and then invoke the import_elementor_template action; the failure to validate the target URL allows them to redirect traffic inside the server\u2019s network, which can lead to data exposure when internal services are queried or modified."}}}}, "created": "2025-12-19T09:16:10.851917+00:00", "updated": "2026-04-22T20:30:26.770398+00:00", "vendors": ["bdthemes", "bdthemes$PRODUCT$prime_slider", "elementor", "elementor$PRODUCT$elementor", "wordpress", "wordpress$PRODUCT$wordpress"]}