This vulnerability (CVE-2024-38730) is classified as CWE-918 SSRF in the Noor alam Magical Addons For Elementor plugin. It affects versions up to 1.1.41 and allows an attacker with low privileges to cause the server to make unintended requests. The CVSS 3.1 base score is 4.9 (medium severity) with network attack vector, high attack complexity, low privileges required, no user interaction, and impacts on confidentiality and integrity but not availability. No patch or official remediation level has been published as of the data provided.

An attacker with low privileges can exploit this SSRF vulnerability to make the server perform unauthorized requests, potentially leading to limited disclosure of internal resources or modification of data. The impact is limited to confidentiality and integrity with no reported impact on availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific temporary mitigations are provided in the available data.