10335 matches found
PT-2025-14011 · Microsoft · Sharepoint Server +1
Name of the Vulnerable Software and Affected Versions: Microsoft Azure Health Bot affected versions not specified Microsoft SharePoint Server affected versions not specified Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability. An authenticated attacker can exploi...
WordPress Pipe Audio Video and Screen Recorder 1.0.6 Bypass / LFI / SSRF
WordPress Pipe Audio Video and Screen Recorder plugin version 1.0.6 suffers from webhook signature bypass, denial of service, local file inclusion, and server-side request forgery vulnerabilities. Exploit Title: WordPress Pipe Audio Video and Screen Recorder 1.0.6 - Multiple Vulnerabilities Date:...
WordPress plugin WP Link Preview 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...
CVE-2025-31076
Server-Side Request Forgery SSRF vulnerability in WP Compress WP Compress for MainWP wp-compress-mainwp allows Server Side Request Forgery.This issue affects WP Compress for MainWP: from n/a through = 6.30.03...
CVE-2025-28093
ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery SSRF in Email Settings...
CVE-2025-28091
maccms10 v2025.1000.4047 has a Server-Side Request Forgery SSRF vulnerability via Add Article...
CVE-2025-28092
ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery SSRF via image upload function...
CVE-2025-28096
OneNav 1.1.0 is vulnerable to Server-Side Request Forgery SSRF in custom headers...
CVE-2025-28090
maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery SSRF in the Collection Custom Interface feature...
CVE-2025-28089
maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery SSRF via the Scheduled Task function...
CVE-2024-48944
Server-Side Request Forgery SSRF vulnerability in Apache Kylin. Through a kylin server, an attacker may forge a request to invoke "/kylin/api/xxx/diag" api on another internal host and possibly get leaked information. There are two preconditions: 1 The attacker has got admin access to a kylin...
CVE-2025-22672
Server-Side Request Forgery SSRF vulnerability in SuitePlugins Video & Photo Gallery for Ultimate Member gallery-for-ultimate-member allows Server Side Request Forgery.This issue affects Video & Photo Gallery for Ultimate Member: from n/a through = 1.1.2...
CVE-2025-30914
Server-Side Request Forgery SSRF vulnerability in Roxnor Metform metform allows Server Side Request Forgery.This issue affects Metform: from n/a through = 3.9.2...
CVE-2025-2835
A vulnerability was found in zhangyd-c OneBlog up to 2.3.9. It has been declared as problematic. Affected by this vulnerability is the function autoLink of the file com/zyd/blog/controller/RestApiController.java. The manipulation leads to server-side request forgery. The attack can be launched...
GHSA-24CF-848G-762C ShopXO Vulnerable to Server-Side Request Forgery (SSRF) and Cross-Site Scripting (XSS)
shopxo v6.4.0 has a ssrf/xss vulnerability in multiple places...
ShopXO Vulnerable to Server-Side Request Forgery (SSRF) via Image Upload
ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery SSRF via image upload function...
ShopXO Vulnerable to Server-Side Request Forgery (SSRF) and Cross-Site Scripting (XSS)
shopxo v6.4.0 has a ssrf/xss vulnerability in multiple places...
GHSA-GFHV-5RQH-7QX3 ShopXO Vulnerable to Server-Side Request Forgery (SSRF) via Email Settings
ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery SSRF in Email Settings...