CVE-2022-2556

The Mailchimp for WooCommerce WordPress plugin before 2.7.2 has an AJAX action that allows high privilege users to perform a POST request on behalf of the server to the internal network/LAN, the body of the request is also appended to the response so it can be used to scan private network for...

CVE-2022-2556

The Mailchimp for WooCommerce WordPress plugin before 2.7.2 has an AJAX action that allows high privilege users to perform a POST request on behalf of the server to the internal network/LAN, the body of the request is also appended to the response so it can be used to scan private network for...

CVE-2022-2556

The CVE-2022-2556 issue affects the Mailchimp for WooCommerce WordPress plugin prior to 2.7.2. An authenticated AJAX action allows high-privilege users to make the server perform a POST to an internal LAN, and the request body is echoed in the response, enabling SSRF against private network resou...