Visualizer <3.3.1 - Blind Server-Side Request Forgery

Visualizer prior to 3.3.1 suffers from a blind server-side request forgery vulnerability via the /wp-json/visualizer/v1/upload-data endpoint. id: CVE-2019-16932 info: name: Visualizer 3.3.1 - Blind Server-Side Request Forgery author: akincibor severity: critical description: | Visualizer prior to...

CVE-2019-16932

creationtimestamp| type| source ---|---|--- 2025-02-20 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-02-20 2025-02-28 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-02-28 2025-04-09 00:00:00+00:00| seen| The Shadowserver...

CVE-2019-16932

A blind SSRF vulnerability exists in the Visualizer plugin before 3.3.1 for WordPress via wp-json/visualizer/v1/upload-data...

CVE-2019-16932

CVE-2019-16932 affects WordPress Visualizer plugin