11700 matches found
CVE-2025-30976 WordPress Nexa Blocks plugin <= 1.1.1 - Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery SSRF vulnerability in wpdive Nexa Blocks nexa-blocks allows Server Side Request Forgery.This issue affects Nexa Blocks: from n/a through = 1.1.1...
CVE-2025-30976
CVE-2025-30976 is a reported SSRF vulnerability in Nexa Blocks (wpdive) that affects Nexa Blocks versions up to and including 1.1.0. The connected documents confirm an SSRF issue but do not provide a concrete root-cause breakdown beyond the vulnerability class, nor any remediation or patched vers...
CVE-2025-30997 WordPress Car Repair Services theme <= 5.0 - Server Side Request Forgery (SSRF) Vulnerability
Server-Side Request Forgery SSRF vulnerability in SmartDataSoft Car Repair Services car-repair-services allows Server Side Request Forgery.This issue affects Car Repair Services: from n/a through = 5.0...
CVE-2025-30997 WordPress Car Repair Services theme <= 5.0 - Server Side Request Forgery (SSRF) Vulnerability
Server-Side Request Forgery SSRF vulnerability in SmartDataSoft Car Repair Services car-repair-services allows Server Side Request Forgery.This issue affects Car Repair Services: from n/a through = 5.0...
CVE-2025-30997
CVE-2025-30997 describes a Server-Side Request Forgery (SSRF) in the WordPress theme “Car Repair Services” by SmartDataSoft. Public details in connected sources confirm affected software: Car Repair Services WordPress Theme (including versions up to 5.0; “n/a through 5.0” in initial record). The ...
CVE-2025-30976: Server-Side Request Forgery (SSRF)
Server-Side Request Forgery SSRF vulnerability in wpdive Nexa Blocks nexa-blocks allows Server Side Request Forgery.This issue affects Nexa Blocks: from n/a through = 1.1.1...
PT-2025-24182 · Unknown · Nexa Blocks
Name of the Vulnerable Software and Affected Versions: Nexa Blocks versions 1.1.0 and earlier Description: A Server-Side Request Forgery SSRF issue affects Nexa Blocks, allowing for Server Side Request Forgery. Recommendations: For versions 1.1.0 and earlier, update to a version that contains a f...
PT-2025-24193 · Smartdatasoft · Smartdatasoft Car Repair Services
Name of the Vulnerable Software and Affected Versions: SmartDataSoft Car Repair Services versions n/a through 5.0 Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability, which allows for Server Side Request Forgery. Recommendations: For versions n/a through 5.0,...
PT-2025-24142 · Unknown · Shawonpro Socialmark
Name of the Vulnerable Software and Affected Versions: ShawonPro SocialMark versions 2.0.7 and earlier Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability, which allows for Server Side Request Forgery. Recommendations: For ShawonPro SocialMark versions 2.0.7 and...
CVE-2025-5510
A vulnerability classified as critical was found in quequnlong shiyi-blog up to 1.2.1. This vulnerability affects unknown code of the file /app/sys/article/optimize. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. The exploit has be...
Exploit for Missing Authorization in Gitlab
CVE-2023-5612 – GitLab SSRF via Webhook URL PoC & Analysis...
WordPress SocialMark plugin <= 2.0.7 - Server Side Request Forgery (SSRF) Vulnerability
Server Side Request Forgery SSRF Vulnerability discovered by theviper17 in WordPress Plugin SocialMark versions = 2.0.7...
WordPress Nexa Blocks plugin <= 1.1.1 - Server Side Request Forgery (SSRF) vulnerability
Server Side Request Forgery SSRF vulnerability discovered by theviper17 in WordPress Plugin Nexa Blocks versions = 1.1.1...
WordPress Car Repair Services Theme <= 5.0 is vulnerable to Server Side Request Forgery (SSRF)
Software Car Repair Services Type Theme Vulnerable versions = 5.0 Fixed in N/A OWASP Top 10 A4: Insecure Design Classification Server Side Request Forgery SSRF CVE CVE-2025-30997 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID ac927e58431a Credits Bonds Required privilege...
@all-star/base (>=0.17.0, <=0.18.2), @all-star/react (>=0.17.0, <=0.18.2) +163 more potentially affected by CVE-2025-30360 via webpack-dev-server (>=5.0.0, <=5.2.0)
webpack-dev-server NPM version =5.0.0, =0.17.0, =0.17.0, =0.17.0, =18.0.0-next.0, =1.0.5-beta.4, =1.0.1-beta.1, =0.18.3, =0.0.1, =0.3.2-develop-1171, =0.4.0, =0.1.15, =0.0.2, =0.0.2, =0.1.3 and more Source cves: CVE-2025-30360 Source advisory: OSV:GHSA-9JGG-88MC-972H...
CVE-2024-7073
A server-side request forgery SSRF vulnerability exists in multiple WSO2 products due to improper input validation in SOAP admin services. This flaw allows unauthenticated attackers to manipulate server-side requests, enabling access to internal and external resources available through the networ...
CVE-2025-37090
A server-side request forgery vulnerability exists in HPE StoreOnce Software...
CVE-2025-48962
Sensitive information disclosure due to SSRF. The following products are affected: Acronis Cyber Protect 16 Windows, Linux before build 39938...
CVE-2025-48962
CVE-2025-48962 affects Acronis Cyber Protect 16 (Windows and Linux) prior to build 39938. The vulnerability is a Server-Side Request Forgery (SSRF) that can lead to sensitive information disclosure. The root cause, as documented in multiple sources, is tied to SSRF in the product’s handling of ex...