CVE-2024-4260 CoBlocks < 3.1.12 - Contributor+ SSRF

The Page Builder Gutenberg Blocks WordPress plugin before 3.1.12 does not prevent users from pinging arbitrary hosts via some of its shortcodes, which could allow high privilege users such as contributors to perform SSRF attacks...

CVE-2024-4260

The Page Builder Gutenberg Blocks (also known as CoBlocks ) WordPress plugin, in versions prior to 3.1.12 , is vulnerable to a Server-Side Request Forgery (SSRF) . The root cause is the plugin's failure to prevent users from pinging arbitrary hosts via specific shortcodes . This flaw allows high-...

CVE-2024-4260 CoBlocks < 3.1.12 - Contributor+ SSRF

The Page Builder Gutenberg Blocks WordPress plugin before 3.1.12 does not prevent users from pinging arbitrary hosts via some of its shortcodes, which could allow high privilege users such as contributors to perform SSRF attacks...

WordPress CoBlocks Plugin < 3.1.12 is vulnerable to Server Side Request Forgery (SSRF)

Software CoBlocks Type Plugin Vulnerable versions 3.1.12 Fixed in 3.1.12 OWASP Top 10 A1: Injection Classification Server Side Request Forgery SSRF CVE CVE-2024-4260 Patch priority Low CVSS severity Low 4.9 Developer Claim ownership PSID 9551e8b9e50a Credits Dmitrii Ignatyev Required privilege...