CVE-2022-1239

The HubSpot WordPress plugin before 8.8.15 does not validate the proxy URL given to the proxy REST endpoint, which could allow users with the editposts capability by default contributor and above to perform SSRF attacks...

PT-2022-13739

Name of the Vulnerable Software and Affected Versions HubSpot WordPress plugin versions prior to 8.8.15 Description The issue allows users with the edit posts capability, by default contributor and above, to perform Server-Side Request Forgery SSRF attacks due to the lack of validation of the pro...

CVE-2022-1239: Server-Side Request Forgery (SSRF)

The HubSpot WordPress plugin before 8.8.15 does not validate the proxy URL given to the proxy REST endpoint, which could allow users with the editposts capability by default contributor and above to perform SSRF attacks...