CVE-2022-2912

The CVE-2022-2912 entry concerns the Craw Data WordPress plugin (versions up to 1.0.0). The underlying issue is missing nonce checks in Ajax handling, allowing a logged-in administrator to modify the url parameter and trigger server-side request forgery (SSRF) to third-party sites. Exploitation d...