CVE-2024-13904: Server-Side Request Forgery (SSRF)

The Platform.ly for WooCommerce plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.1.6 via the 'hooks' function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web...

PT-2025-10063

Name of the Vulnerable Software and Affected Versions Platform.ly for WooCommerce plugin for WordPress versions prior to 1.1.7 Description The issue allows unauthenticated attackers to make web requests to arbitrary locations originating from the web application. This can be used to query and...