9969 matches found
SonicWall SMA1000 Encoded URL SSRF Vulnerability
A Server-side request forgery SSRF vulnerability has been identified in the SMA1000 Appliance Work Place interface. By using an encoded URL, a remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.IMPORTANT: SonicWall PSIRT strongly advises...
CVE-2024-13940
The Ninja Forms Webhooks plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.0.7 via the form webhook functionality. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitra...
CVE-2024-13940 Ninja Forms Webhooks <= 3.0.7 - Authenticated (Admin+) Server-Side Request Forgery via Form Webhook
The Ninja Forms Webhooks plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.0.7 via the form webhook functionality. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitra...
CVE-2024-13940 Ninja Forms Webhooks <= 3.0.7 - Authenticated (Admin+) Server-Side Request Forgery via Form Webhook
The Ninja Forms Webhooks plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.0.7 via the form webhook functionality. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitra...
CVE-2024-13940
CVE-2024-13940: Ninja Forms Webhooks for WordPress
PT-2025-21182 · Unknown · Sma1000 Appliance
Name of the Vulnerable Software and Affected Versions: SMA1000 Appliance affected versions not specified Description: A Server-side request forgery SSRF vulnerability has been identified in the SMA1000 Appliance Work Place interface. By using an encoded URL, a remote unauthenticated attacker coul...
PT-2025-21220 · Unknown · A-Blog Cms
Name of the Vulnerable Software and Affected Versions: a-blog cms affected versions not specified Description: A server-side request forgery vulnerability exists in a-blog cms, allowing a remote unauthenticated attacker to gain access to sensitive information by sending a specially crafted reques...
WordPress Ninja Forms Webhooks plugin <= 3.0.7 - Authenticated (Admin+) Server-Side Request Forgery via Form Webhook vulnerability
Authenticated Admin+ Server-Side Request Forgery via Form Webhook vulnerability discovered by Francesco Carlucci in WordPress Plugin Ninja Forms Webhooks versions = 3.0.7...
Medium: pcs
Issue Overview: Versions of the package sinatra from 0.0.0 are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the X-Forwarded-Host XFH header. When making a request to a method with redirect applied, it is possible to trigger an Open Redirect Attack by inserting an arbitrar...
CVE-2025-45887
Yifang CMS v2.0.2 is vulnerable to Server-Side Request Forgery SSRF in /api/file/getRemoteContent...
CVE-2025-29972
Server-Side Request Forgery SSRF in Azure allows an authorized attacker to perform spoofing over a network...
CVE-2025-47483
Server-Side Request Forgery SSRF vulnerability in Iulia Cazan Easy Replace Image easy-replace-image allows Server Side Request Forgery.This issue affects Easy Replace Image: from n/a through = 3.5.0...
CVE-2025-47548
Server-Side Request Forgery SSRF vulnerability in Varun Dubey Wbcom Designs - Activity Link Preview For BuddyPress activity-link-preview-for-buddypress allows Server Side Request Forgery.This issue affects Wbcom Designs - Activity Link Preview For BuddyPress: from n/a through = 1.4.4...
CVE-2025-47464
Server-Side Request Forgery SSRF vulnerability in solacewp Solace Extra solace-extra allows Server Side Request Forgery.This issue affects Solace Extra: from n/a through = 1.3.1...
CVE-2025-47664
Server-Side Request Forgery SSRF vulnerability in ThimPress WP Pipes allows Server Side Request Forgery. This issue affects WP Pipes: from n/a through 1.4.2...
CVE-2025-47484
Server-Side Request Forgery SSRF vulnerability in Oliver Campion Display Remote Posts Block display-remote-posts-block allows Server Side Request Forgery.This issue affects Display Remote Posts Block: from n/a through = 1.1.0...
CVE-2025-45887
Yifang CMS v2.0.2 is vulnerable to Server-Side Request Forgery SSRF in /api/file/getRemoteContent...
CVE-2025-45887
Yifang CMS v2.0.2 is vulnerable to Server-Side Request Forgery SSRF in /api/file/getRemoteContent...
PT-2025-20558
Name of the Vulnerable Software and Affected Versions Yifang CMS version 2.0.2 Description The issue is related to Server-Side Request Forgery SSRF in the "/api/file/getRemoteContent" API endpoint. This allows an attacker to forge requests from the server to an arbitrary destination, potentially...