CVE-2022-40700

Server-Side Request Forgery SSRF vulnerability in Montonio Montonio for WooCommerce, Wpopal Wpopal Core Features, AMO for WP – Membership Management ArcStone wp-amo, Long Watch Studio WooVirtualWallet – A virtual wallet for WooCommerce, Long Watch Studio WooVIP – Membership plugin for WordPress a...

PT-2024-11631 · Agence Press · Css Adder By Agence-Press

Name of the Vulnerable Software and Affected Versions: Montonio for WooCommerce versions 6.0.1 and earlier Wpopal Core Features versions 1.5.8 and earlier ArcStone wp-amo versions 4.6.6 and earlier WooVirtualWallet – A virtual wallet for WooCommerce versions 2.2.1 and earlier WooVIP – Membership...

WordPress Qards Responsive Page Builder plugin - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability found by "theMiddle" in WordPress Qards Responsive Page Builder plugin no version information, changelog unavailable. Vulnerable script ".../plugins/qards/html2canvasproxy.php". Google dorking is possible by "inurl:"plugins/qards" dork. Solution...