Lucene search
PRIOn knowledge basePRION:CVE-2022-3247HistoryOct 25, 2022 - 5:15 p.m.
Server side request forgery (ssrf)
2022-10-2517:15:00
PRIOn knowledge base
www.prio-n.com
4
ssrf
blog2social
ajax
authorization
wordpress
plugin
0.001 Low
EPSS
Percentile
25.0%
The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin before 6.9.10 does not have authorisation in an AJAX action, and does not ensure that the URL to make a request to is an external one. As a result, any authenticated users, such as subscriber could perform SSRF attacks
| CPE | Name | Operator | Version |
|---|---|---|---|
| blog2social | lt | 6.9.10 |
Related
wpexploit
wpexploit
Blog2Social < 6.9.10 - Subscriber+ SSRF
2022-10-03 00:00:00
patchstack
patchstack
cve
cve
CVE-2022-3247
2022-10-25 17:15:56
nvd
nvd
CVE-2022-3247
2022-10-25 17:15:56
cvelist
cvelist
CVE-2022-3247 Blog2Social < 6.9.10 - Subscriber+ SSRF
2022-10-25 00:00:00
wpvulndb
wpvulndb
Blog2Social < 6.9.10 - Subscriber+ SSRF
2022-10-03 00:00:00
openvas
openvas
WordPress Blog2Social Plugin < 6.9.10 Multiple Vulnerabilities
2023-01-11 00:00:00