CVE-2021-24371

🗓️ 02 Aug 2021 10:31:53Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 46 Views🌐 WEB

The Import feature of the RSVPMaker WordPress plugin before 8.7.3 allows SSRF attack

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	The vulnerability of the import function implementation (/wp-admin/tools.php?page=rsvpmaker_export_screen) of the RSVPMaker plugin for WordPress content management system allows a hacker to perform an SSRF attack.	15 Sep 202100:00	–	bdu_fstec
CNNVD	WordPress Plugin RSVPMaker 代码问题漏洞	2 Aug 202100:00	–	cnnvd
Cvelist	CVE-2021-24371 RSVPMaker < 8.7.3 - Authenticated (admin+) SSRF	2 Aug 202110:31	–	cvelist
EUVD	EUVD-2021-11284	7 Oct 202500:30	–	euvd
NVD	CVE-2021-24371	2 Aug 202111:15	–	nvd
OSV	CVE-2021-24371	2 Aug 202111:15	–	osv
Patchstack	WordPress RSVPMaker plugin <= 8.7.2 - Authenticated Server-Side Request Forgery (SSRF) vulnerability	29 Jun 202100:00	–	patchstack
Prion	Design/Logic Flaw	2 Aug 202111:15	–	prion
Positive Technologies	PT-2021-3989 · WordPress · Rsvpmaker	14 May 202100:00	–	ptsecurity
RedhatCVE	CVE-2021-24371	22 May 202519:21	–	redhatcve

NVD

Vulners

Node

carrcommunications rsvpmakerRange<8.7.3wordpress

[
  {
    "product": "RSVPMaker",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "8.7.3",
        "status": "affected",
        "version": "8.7.3",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
codevigilant	www.codevigilant.com/disclosure/2021/wp-plugin-rsvpmaker/
wpscan	www.wpscan.com/vulnerability/63be225c-ebee-4cac-b43e-cf033ee7425d

Parameter	Position	Path	Description	CWE
importrsvp	request body	wp-json/rsvpmaker/v1/importnow	SSRF via Import feature: plugin calls curl on provided URL without validating that it is remote, allowing internal network scanning.	CWE-918
start	request body	wp-json/rsvpmaker/v1/importnow	SSRF via Import feature: plugin calls curl on provided URL without validating that it is remote, allowing internal network scanning.	CWE-918

17 Jun 2026 03:39Current

3.5Low risk

Vulners AI Score3.5

CVSS 3.12.7

CVSS 24

EPSS0.01012

CWE-918