CVE-2022-1037

The EXMAGE WordPress plugin before 1.0.7 does to ensure that images added via URLs are external images, which could lead to a blind SSRF issue by using local URLs...

CVE-2022-1037 EXMAGE < 1.0.7 - Admin+ Blind SSRF

The EXMAGE WordPress plugin before 1.0.7 does to ensure that images added via URLs are external images, which could lead to a blind SSRF issue by using local URLs...

CVE-2022-1037

CVE-2022-1037 affects the WordPress EXMAGE plugin prior to 1.0.7. The issue arises because images added via URLs are not consistently treated as external, enabling a blind SSRF through local URLs. Documented impact is a blind SSRF condition; no exploit details are provided beyond this description...