WP Remote Users Sync < 1.2.13 - Subscriber+ SSRF

2023-08-1600:00:00

wpscan.com

plugin vulnerability ssrf authenticated users

AI Score

6.3

Confidence

High

EPSS

0.002

Percentile

52.6%

JSON

Description The plugin does not validate a parameter before making a request to it via the notify_ping_remote function, allowing any authenticated users, such as subscriber to perform SSRF attack