Lucene search
+L

2 matches found

NVD
NVD
•added 2024/02/28 7:15 a.m.•36 views

CVE-2024-1568

The Seraphinite Accelerator plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.20.52 via the OnAdminApiHtmlCheck function. This makes it possible for authenticated attackers, with subscriber-level access and above, to make web requests to...

6.4CVSS6.2AI score0.00335EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/28 12:00 a.m.•1 views

CVE-2024-1568: Server-Side Request Forgery (SSRF)

The Seraphinite Accelerator plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.20.52 via the OnAdminApiHtmlCheck function. This makes it possible for authenticated attackers, with subscriber-level access and above, to make web requests to...

6.4CVSS5.8AI score0.00335EPSS
SaveExploits0References3
Rows per page
Query Builder