Lucene search
K

4 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 4:11 a.m.5 views

CVE-2023-3958

The WP Remote Users Sync plugin for WordPress is vulnerable to Server Side Request Forgery via the 'notifypingremote' AJAX function in versions up to, and including, 1.2.12. This can allow authenticated attackers with subscriber-level permissions or above to make web requests to arbitrary locatio...

8.5CVSS6.7AI score0.00204EPSS
Exploits0References1
OSV
OSV
added 2023/08/16 5:15 a.m.2 views

CVE-2023-3958

The WP Remote Users Sync plugin for WordPress is vulnerable to Server Side Request Forgery via the 'notifypingremote' AJAX function in versions up to, and including, 1.2.12. This can allow authenticated attackers with subscriber-level permissions or above to make web requests to arbitrary locatio...

5.4CVSS5.9AI score0.00204EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2023/08/16 4:36 a.m.5 views

CVE-2023-3958 WP Remote Users Sync <= 1.2.12 - Authenticated (Subscriber+) Server Side Request Forgery

The WP Remote Users Sync plugin for WordPress is vulnerable to Server Side Request Forgery via the 'notifypingremote' AJAX function in versions up to, and including, 1.2.12. This can allow authenticated attackers with subscriber-level permissions or above to make web requests to arbitrary locatio...

8.5CVSS6.8AI score0.00204EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/08/16 12:0 a.m.1 views

WordPress Plugin Remote Users Sync 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

8.5CVSS7.2AI score0.00204EPSS
Exploits0References5
Rows per page
Query Builder