CVE-2024-13904: Server-Side Request Forgery (SSRF)

The Platform.ly for WooCommerce plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.1.6 via the 'hooks' function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web...

PT-2025-10063

Name of the Vulnerable Software and Affected Versions Platform.ly for WooCommerce plugin for WordPress versions prior to 1.1.7 Description The issue allows unauthenticated attackers to make web requests to arbitrary locations originating from the web application. This can be used to query and...

CVE-2024-3585

CVE-2024-3585 describes a vulnerability in the Send PDF for Contact Form 7 plugin for WordPress. It permits unauthenticated access to form submissions (including PDFs) due to a missing capability check on the hooks function in all versions up to and including 1.0.2.3, enabling information exposur...