11992 matches found
CVE-2024-13411
The Zapier for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.5.1 via the updateduser function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary...
CVE-2025-31076
Server-Side Request Forgery SSRF vulnerability in WP Compress WP Compress for MainWP wp-compress-mainwp allows Server Side Request Forgery.This issue affects WP Compress for MainWP: from n/a through = 6.30.03...
CVE-2025-31076 WordPress WP Compress for MainWP plugin <= 6.30.03 - Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery SSRF vulnerability in WP Compress WP Compress for MainWP allows Server Side Request Forgery. This issue affects WP Compress for MainWP: from n/a through 6.30.03...
CVE-2025-31076
CVE-2025-31076: WordPress WP Compress for MainWP contains an SSRF vulnerability (Authenticated, Subscriber+). Affected version range: up to 6.30.03. Attack vector and specific endpoint details are not provided in the documents, but the issue is classified as Server-Side Request Forgery with a CVS...
CVE-2025-31076 WordPress WP Compress for MainWP plugin <= 6.30.03 - Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery SSRF vulnerability in WP Compress WP Compress for MainWP wp-compress-mainwp allows Server Side Request Forgery.This issue affects WP Compress for MainWP: from n/a through = 6.30.03...
CVE-2025-28089
maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery SSRF via the Scheduled Task function...
CVE-2025-28090
maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery SSRF in the Collection Custom Interface feature...
CVE-2025-28092
ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery SSRF via image upload function...
CVE-2025-28089
maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery SSRF via the Scheduled Task function...
CVE-2025-28089
The open-source PHP + MYSQL website building system maccms10 version v2025.1000.4047 is vulnerable to Server-Side Request Forgery (SSRF) . The flaw originates within the Scheduled Task function , which could allow an attacker to make unauthorized requests from the server. As a mitigation, it is r...
CVE-2025-28092
The ShopXO e-commerce system (version v6.4.0 ) is vulnerable to Server-Side Request Forgery (SSRF) within its image upload function . The root cause is the insufficient validation of user-supplied URLs , which allows an attacker to craft requests that the server executes on their behalf. While th...
CVE-2025-28090
The maccms10 open-source content management system (version v2025.1000.4047 ) is vulnerable to a Server-Side Request Forgery (SSRF) in the Collection Custom Interface feature. This vulnerability allows an attacker to trick the server into making unintended requests. To mitigate the risk, it is re...
CVE-2025-28093
ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery SSRF in Email Settings...
CVE-2025-28093
ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery (SSRF) within the Email Settings feature. The root cause is the insufficient validation of user-supplied URLs , which allows an attacker to manipulate the server into making arbitrary requests to internal or external resources. This could...
CVE-2025-28096
OneNav version 1.1.0 , a bookmark management tool, is vulnerable to Server-Side Request Forgery (SSRF) due to an issue in custom headers . This flaw could allow an attacker to force the server to make requests to arbitrary domains, potentially resulting in unauthorized access to sensitive data or...
CVE-2025-28096
OneNav 1.1.0 is vulnerable to Server-Side Request Forgery SSRF in custom headers...
CVE-2025-28093
ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery SSRF in Email Settings...
CVE-2025-28090
maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery SSRF in the Collection Custom Interface feature...