3 matches found
Server side request forgery (ssrf)
Server-side request forgery SSRF vulnerability in proxy.php in the jRSS Widget plugin 1.2 and earlier for WordPress allows remote attackers to trigger outbound requests and enumerate open ports via the url parameter...
5.8CVSS7.3AI score0.01889EPSS
SaveExploits1References1Affected Software1
CVE-2014-9292
Server-side request forgery SSRF vulnerability in proxy.php in the jRSS Widget plugin 1.2 and earlier for WordPress allows remote attackers to trigger outbound requests and enumerate open ports via the url parameter...
6.8AI score0.01889EPSS
SaveExploits1References1
WordPress jRSS Widget Plugin <= 1.2 - SSRF
This vulnerability is in the proxy.php. It allows the attackers to trigger outbound requests and enumerate open ports via the "URL" parameter. Solution Update the plugin...
5.8CVSS5.5AI score0.01889EPSS
SaveExploits1References1Affected Software1
20