8751 matches found
CVE-2025-60181 WordPress Silencesoft RSS Reader Plugin <= 0.6 - Server Side Request Forgery (SSRF) Vulnerability
Server-Side Request Forgery SSRF vulnerability in silence Silencesoft RSS Reader external-rss-reader allows Server Side Request Forgery.This issue affects Silencesoft RSS Reader: from n/a through = 0.6...
CVE-2025-60181
CVE-2025-60181 is a Server-Side Request Forgery (SSRF) in Silencesoft RSS Reader (WordPress plugin Silencesoft RSS Reader, <=0.6). Public details in the initial document indicate an SSRF vulnerability with a CVSS v3.1 vector of AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N and a base score of 5.4 (Mediu...
CVE-2025-60161
CVE-2025-60161: ZoloBlocks (ZoloBlocks plugin)
CVE-2025-60161 WordPress ZoloBlocks Plugin <= 2.3.11 - Server Side Request Forgery (SSRF) Vulnerability
Server-Side Request Forgery SSRF vulnerability in bdthemes ZoloBlocks zoloblocks allows Server Side Request Forgery.This issue affects ZoloBlocks: from n/a through = 2.3.11...
CVE-2025-10137
The Snow Monkey theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 29.1.5 via the request function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be...
CVE-2025-10137 Snow Monkey <= 29.1.5 - Unauthenticated Blind Server-Side Request Forgery
The Snow Monkey theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 29.1.5 via the request function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be...
CVE-2025-10137
CVE-2025-10137 (Snow Monkey theme for WordPress) is an SSRF vulnerability in the Snow Monkey theme. Public details in connected docs indicate an unauthenticated, blind SSRF via the request() function affecting Snow Monkey versions up to 29.1.5. Wordfence references show the patch/mitigation path,...
CVE-2025-10137 Snow Monkey <= 29.1.5 - Unauthenticated Blind Server-Side Request Forgery
The Snow Monkey theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 29.1.5 via the request function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be...
CVE-2025-10137 Snow Monkey <= 29.1.5 - Unauthenticated Blind Server-Side Request Forgery
The Snow Monkey theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 29.1.5 via the request function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be...
PT-2025-39603
Name of the Vulnerable Software and Affected Versions bdthemes ZoloBlocks versions through 2.3.9 Description A Server-Side Request Forgery SSRF issue exists in bdthemes ZoloBlocks. This allows for Server Side Request Forgery. The issue impacts the software when using versions through 2.3.9...
WordPress plugin Silencesoft RSS Reader 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...
Omnissa Workspace ONE UEM Multiple Vulnerabilities (OMSA-2025-0004)
The version of Workspace ONE UEM console running on the remote host is affected by multiple vulnerabilities, as follows: - Omnissa Workspace ONE UEM contains a Server-Side Request Forgery SSRF Vulnerability. A malicious actor with user privileges may be able to access restricted internal system...
WeKnora 代码问题漏洞
WeKnora is an LLM-based framework open-sourced by Tencent, with features such as deep document understanding, semantic retrieval and context-aware answers using the RAG paradigm. A code issue vulnerability exists in WeKnora version 0.1.0, which stems from incorrect manipulation of the parameter...
PT-2025-39515
Name of the Vulnerable Software and Affected Versions Snow Monkey versions prior to 29.1.6 Description The Snow Monkey theme for WordPress is susceptible to Server-Side Request Forgery SSRF in all versions up to and including 29.1.5. This flaw resides within the request function and allows...
cors-anywhere vulnerable to server-side request forgery
Rob -- W / cors-anywhere instances configured as an open proxy allow unauthenticated external users to induce the server to make HTTP requests to arbitrary targets SSRF. Because the proxy forwards requests and headers, an attacker can reach internal-only endpoints and link-local metadata services...
CVE-2020-36851
CVE-2020-36851 affects cors-anywhere/server-side proxy configurations that run as an open proxy. The issue allows unauthenticated external users to induce the proxy to make HTTP requests to arbitrary targets (SSRF) because the proxy forwards requests and headers, enabling access to internal endpo...
Exploit for CVE-2025-51591
CVE-2025-51591 Pandoc SSRF POC A Server-Side Request Forger...
Exploit for Server-Side Request Forgery in Wkhtmltopdf
CVE-2022-35583 Pandoc SSRF POC A Server-Side Request Forgery...
