Lucene search

K
wpvulndbWpvulndbWPVDB-ID:213B80A1-6CC5-4B39-B4B3-2C74DB6E8E06
HistoryOct 21, 2022 - 12:00 a.m.

Better Messages < 1.9.10.69 - Subscriber+ SSRF

2022-10-2100:00:00
wpscan.com
4
plugin
parameter validation
subscriber ssrf

0.001 Low

EPSS

Percentile

42.9%

The plugin does not validate a parameter before making a request to it, which could allow users with a role as low as subscriber to perform SSRF attacks

CPENameOperatorVersion
bp-better-messageslt1.9.10.69

0.001 Low

EPSS

Percentile

42.9%

Related for WPVDB-ID:213B80A1-6CC5-4B39-B4B3-2C74DB6E8E06