CVE-2024-56275: Envato Elements

Medium severity, CVSS 4.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Server-Side Request Forgery (SSRF) vulnerability in Envato Envato Elements allows Server Side Request Forgery.This issue affects Envato Elements: from n/a through 2.0.14.

Affected products

• Envato Envato Elements: up to and including 2.0.14

Published 2025-01-07. Last modified 2026-06-17.