Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbWpvulndbWPVDB-ID:1180E8B9-9F9D-457A-BC4D-ABAFA72CCC66
HistoryAug 12, 2022 - 12:00 a.m.

Rank Math SEO < 1.0.95.1 - Unauthenticated SSRF

2022-08-1200:00:00
wpscan.com
12
rank math seo
unauthenticated
ssrf
access
rest endpoints
headless settings
attackers
software

0.004 Low

EPSS

Percentile

73.5%

JSON

The plugin does not properly restrict access to some .htaccess blocked REST endpoints when the headless settings is enabled, which could allow unauthenticated attackers to perform SSRF attacks

CPENameOperatorVersion
seo-by-rank-mathlt1.0.95.1

Related

veracode 1
osv 1
patchstack 1
openvas 1
github 1
nvd 1
prion 1
cvelist 1
cve 1
veracode
veracode
Server-Side Request Forgery
2022-09-21 06:43:59
osv
osv
Rank Math SEO plugin vulnerable to Server-Side Request Forgery
2022-09-10 00:00:27
patchstack
patchstack
WordPress Rank Math SEO plugin <= 1.0.95 - Server-Side Request Forgery (SSRF) vulnerability
2022-08-12 00:00:00
openvas
openvas
WordPress Rank Math SEO Plugin < 1.0.95.1 SSRF Vulnerability
2022-09-12 00:00:00
github
github
Rank Math SEO plugin vulnerable to Server-Side Request Forgery
2022-09-10 00:00:27
nvd
nvd
CVE-2022-36376
2022-09-09 15:15:10
prion
prion
Server side request forgery (ssrf)
2022-09-09 15:15:00
cvelist
cvelist
CVE-2022-36376 WordPress Rank Math SEO plugin <= 1.0.95 - Server-Side Request Forgery (SSRF) vulnerability
2022-08-12 00:00:00
cve
cve
CVE-2022-36376
2022-09-09 15:15:10

0.004 Low

EPSS

Percentile

73.5%

JSON
Related for WPVDB-ID:1180E8B9-9F9D-457A-BC4D-ABAFA72CCC66
veracode1osv1patchstack1openvas1github1nvd1prion1cvelist1cve1