Lucene search
+L

4 matches found

OSV
OSV
added 2024/04/24 5:15 a.m.7 views

CVE-2023-7253

The Import WP WordPress plugin before 2.13.1 does not prevent users with the administrator role from pinging conducting SSRF attacks, which may be a problem in multisite configurations...

6.1CVSS5.7AI score0.00568EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2024/04/24 5:0 a.m.29 views

CVE-2023-7253 Import WP < 2.13.1 - Admin+ Server-side Request Forgery

The Import WP WordPress plugin before 2.13.1 does not prevent users with the administrator role from pinging conducting SSRF attacks, which may be a problem in multisite configurations...

6.6AI score0.00568EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
added 2024/04/24 5:0 a.m.28 views

CVE-2023-7253 Import WP < 2.13.1 - Admin+ Server-side Request Forgery

The Import WP WordPress plugin before 2.13.1 does not prevent users with the administrator role from pinging conducting SSRF attacks, which may be a problem in multisite configurations...

6.7AI score0.00568EPSS
SaveExploits2References1
Patchstack
Patchstack
added 2024/04/24 12:0 a.m.15 views

WordPress Import WP Plugin < 2.13.1 is vulnerable to Server Side Request Forgery (SSRF)

Software Import WP Type Plugin Vulnerable versions 2.13.1 Fixed in 2.13.1 OWASP Top 10 A1: Injection Classification Server Side Request Forgery SSRF CVE CVE-2023-7253 Patch priority Low CVSS severity Low 5.5 Developer Claim ownership PSID ef4fb29b4b88 Credits Mr Empy Required privilege...

6.1CVSS6.9AI score0.00568EPSS
SaveExploits2References4Affected Software1
Rows per page
Query Builder