10445 matches found
CVE-2025-47464
CVE-2025-47464: Solace Extra (WordPress) is affected by a Server-Side Request Forgery (SSRF) vulnerability in versions up to 1.3.1. The issue is authenticated (Subscriber+) and has a CVSS v3.1 base score of 4.9 (Medium). Connected sources indicate the vulnerability exists in Solace Extra
CVE-2025-47464 WordPress Solace Extra <= 1.3.1 - Server Side Request Forgery (SSRF) Vulnerability
Server-Side Request Forgery SSRF vulnerability in solacewp Solace Extra allows Server Side Request Forgery. This issue affects Solace Extra: from n/a through 1.3.1...
CVE-2025-47464 WordPress Solace Extra plugin <= 1.3.1 - Server Side Request Forgery (SSRF) Vulnerability
Server-Side Request Forgery SSRF vulnerability in solacewp Solace Extra solace-extra allows Server Side Request Forgery.This issue affects Solace Extra: from n/a through = 1.3.1...
WordPress Wbcom Designs - Activity Link Preview For BuddyPress plugin <= 1.4.4 - Server Side Request Forgery (SSRF) Vulnerability
WordPress Wbcom Designs - Activity Link Preview For BuddyPress plugin = 1.4.4 - Server Side Request Forgery SSRF Vulnerability discovered by HLog in WordPress Plugin Wbcom Designs - Activity Link Preview For BuddyPress versions = 1.4.4...
WordPress Display Remote Posts Block plugin <= 1.1.0 - Server Side Request Forgery (SSRF) Vulnerability
Server Side Request Forgery SSRF Vulnerability discovered by theviper17 in WordPress Plugin Display Remote Posts Block versions = 1.1.0...
WordPress Easy Replace Image plugin <= 3.5.0 - Server Side Request Forgery (SSRF) Vulnerability
Server Side Request Forgery SSRF Vulnerability discovered by theviper17 in WordPress Plugin Easy Replace Image versions = 3.5.0...
WordPress Solace Extra plugin <= 1.3.1 - Server Side Request Forgery (SSRF) Vulnerability
Server Side Request Forgery SSRF Vulnerability discovered by stealthcopter in WordPress Plugin Solace Extra versions = 1.3.1...
WordPress LiteSpeed Cache plugin <= 7.0.1 - Server Side Request Forgery (SSRF) vulnerability
Server Side Request Forgery SSRF vulnerability discovered by TaiYou in WordPress Plugin LiteSpeed Cache versions = 7.0.1...
Security Bulletin: The IBM® Engineering Lifecycle Engineering products using IBM WebSphere Application Server is vulnerable to server-side request forgery (CVE-2025-27907)
Summary IBM WebSphere Application Server is vulnerable to server-side request forgery. Following IBM® Engineering Lifecycle Engineering product is vulnerable to this attack, it has been addressed in this bulletin: IBM Engineering Test Management. Vulnerability Details Refer to the security...
IBM WebSphere Application Server Server-Side Request Forgery Vulnerability
IBM WebSphere Application Server WAS is an application server product from International Business Machines IBM. The product is a platform for JavaEE and Web services applications and is the foundation of the IBM WebSphere software platform. A server-side request forgery vulnerability exists in IB...
SonicWall SMA1000 Cross-Site Request Forgery Vulnerability
The SonicWALL SMA1000 is a series of secure mobile access solutions from SonicWALL USA. The SonicWALL SMA1000 suffers from a cross-site request forgery vulnerability that originates from a server-side request forgery on the interface under certain conditions, which can be exploited by an attacker...
IBM Maximo Asset Management Server-Side Request Forgery Vulnerability
IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from International Business Machines IBM. The solution is capable of managing all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control for...
PT-2025-20111 · Unknown · Oliver Campion Display Remote Posts Block
Name of the Vulnerable Software and Affected Versions: Oliver Campion Display Remote Posts Block versions 1.1.0 and earlier Description: The issue is a Server-Side Request Forgery SSRF vulnerability, which allows for Server Side Request Forgery. This means an attacker can potentially force the...
PT-2025-20110 · Unknown · Iulia Cazan Easy Replace Image
Name of the Vulnerable Software and Affected Versions: Iulia Cazan Easy Replace Image versions prior to 3.5.0 Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability, which allows for Server Side Request Forgery. Recommendations: For versions prior to 3.5.0, update t...
PT-2025-20198 · Unknown · Webinarpress
Name of the Vulnerable Software and Affected Versions: WebinarPress versions 1.33.27 and earlier Description: A Server-Side Request Forgery SSRF issue affects the software, allowing for Server Side Request Forgery. Recommendations: For versions 1.33.27 and earlier, update to a version that contai...
PT-2025-20161 · Wbcom Designs · Activity Link Preview For Buddypress
Name of the Vulnerable Software and Affected Versions: Wbcom Designs - Activity Link Preview For BuddyPress versions 1.4.4 and earlier Description: A Server-Side Request Forgery SSRF issue affects the software, allowing for Server Side Request Forgery. Recommendations: For versions 1.4.4 and...
PT-2025-20095 · Unknown · Solace Extra
Name of the Vulnerable Software and Affected Versions: Solace Extra versions 1.3.1 and earlier Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability, which allows for Server Side Request Forgery. This means an attacker can potentially trick the server into making...
CVE-2025-45250
MrDoc v0.95 and before is vulnerable to Server-Side Request Forgery SSRF in the validateurl function of the appdoc/utils.py file...
USN-7488-1: Python vulnerabilities
It was discovered that Python incorrectly handled parsing bracketed hosts. A remote attacker could possibly use this issue to perform a Server-Side Request Forgery SSRF attack. This issue only affected python 2.7 and python3.4 on Ubuntu 14.04 LTS; python2.7 on Ubuntu 16.04 LTS; python2.7,...