| Reporter | Title | Published | Views | Family All 13 |
|---|---|---|---|---|
| CVE-2023-5798 | 26 Oct 202314:15 | โ | circl | |
| WordPress Plugin Assistant Code Issue Vulnerability | 26 Oct 202300:00 | โ | cnnvd | |
| CVE-2023-5798 Assistant < 1.4.4 - Editor+ SSRF | 26 Oct 202309:08 | โ | cvelist | |
| EUVD-2023-58081 | 3 Oct 202520:07 | โ | euvd | |
| CVE-2023-5798 | 26 Oct 202310:15 | โ | nvd | |
| CVE-2023-5798 | 26 Oct 202310:15 | โ | osv | |
| WordPress Assistant โ Every Day Productivity Apps Plugin < 1.4.4 is vulnerable to Server Side Request Forgery (SSRF) | 27 Oct 202300:00 | โ | patchstack | |
| Server side request forgery (ssrf) | 26 Oct 202310:15 | โ | prion | |
| PT-2023-32335 ยท WordPress ยท The Assistant Wordpress Plugin | 26 Oct 202300:00 | โ | ptsecurity | |
| CVE-2023-5798 | 23 May 202504:33 | โ | redhatcve |
[
{
"vendor": "Unknown",
"product": "Assistant",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "1.4.4"
}
],
"defaultStatus": "unaffected",
"collectionURL": "https://wordpress.org/plugins"
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| url | query param | index.php?fl_asst_image_proxy | Unvalidated URL parameter used to perform server-side requests, enabling SSRF via wp_remote_get(). | CWE-918 |
Data
Build on a solid foundation withย Vulners data
Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data
Api
Power your application withย Vulners API
The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access
App
Assess and manage vulnerabilities withย Vulnersย tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation