EUVD-2025-6245

Malicious code in bioql PyPI...

CVE-2024-13857

The WPGet API – Connect to any external REST API plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.2.10. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locatio...

CVE-2024-13857

The WPGet API – Connect to any external REST API plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.2.10. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locatio...

CVE-2024-13857 WPGet API <= 2.2.10 - Authenticated (Administrator+) Server-Side Request Forgery

The WPGet API – Connect to any external REST API plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.2.10. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locatio...

CVE-2024-13857 WPGet API <= 2.2.10 - Authenticated (Administrator+) Server-Side Request Forgery

The WPGet API – Connect to any external REST API plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.2.10. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locatio...

CVE-2024-13857

CVE-2024-13857 – WordPress WPGet API plugin (≤ v2.2.10) is affected by an authenticated SSRF vulnerability. An Administrator+ user can make web requests from the WordPress host to internal or external targets, potentially exposing/modifying internal data. Connected sources confirm the affected pl...

PT-2025-10079

Name of the Vulnerable Software and Affected Versions WPGet API – Connect to any external REST API plugin for WordPress versions up to, and including, 2.2.10 Description The issue allows authenticated attackers with Administrator-level access and above to perform Server-Side Request Forgery. This...

CVE-2024-13857: Server-Side Request Forgery (SSRF)

The WPGet API – Connect to any external REST API plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.2.10. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locatio...