Lucene search

K
wpvulndbWpvulndbWPVDB-ID:8E55ED30-364E-4021-A306-3FCF52021C4C
HistorySep 21, 2021 - 12:00 a.m.

Telefication <= 1.8.0 - Open Relay & Server-Side Request Forgery

2021-09-2100:00:00
wpscan.com
12
telefication
plugin
vulnerability
open relay
server-side request forgery
user-supplied url
curl requests

EPSS

0.001

Percentile

43.1%

The plugin is vulnerable to Open Proxy and Server-Side Request Forgery via the ~/bypass.php file due to a user-supplied URL request value that gets called by a curl requests.

EPSS

0.001

Percentile

43.1%

Related for WPVDB-ID:8E55ED30-364E-4021-A306-3FCF52021C4C