CVE-2022-2912 Craw Data <= 1.0.0 - Server Side Request Forgery

The Craw Data WordPress plugin through 1.0.0 does not implement nonce checks, which could allow attackers to make a logged in admin change the url value performing unwanted crawls on third-party sites SSRF...

CVE-2022-2912 Craw Data <= 1.0.0 - Server Side Request Forgery

The Craw Data WordPress plugin through 1.0.0 does not implement nonce checks, which could allow attackers to make a logged in admin change the url value performing unwanted crawls on third-party sites SSRF...

CVE-2022-2912

The CVE-2022-2912 entry concerns the Craw Data WordPress plugin (versions up to 1.0.0). The underlying issue is missing nonce checks in Ajax handling, allowing a logged-in administrator to modify the url parameter and trigger server-side request forgery (SSRF) to third-party sites. Exploitation d...