CVE-2023-5798 Assistant < 1.4.4 - Editor+ SSRF

2023-10-2609:08:53

WPScan

raw.githubusercontent.com

cve-2023-5798

ssrf

wordpress

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

18.2%

JSON

The Assistant WordPress plugin before 1.4.4 does not validate a parameter before making a request to it via wp_remote_get(), which could allow users with a role as low as Editor to perform SSRF attacks