Логотип exploitDog
bind:CVE-2022-1398
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2022-1398

Количество 2

Количество 2

nvd логотип

CVE-2022-1398

больше 3 лет назад

The External Media without Import WordPress plugin through 1.1.2 does not have any authorisation and does to ensure that medias added via URLs are external medias, which could allow any authenticated users, such as subscriber to perform blind SSRF attacks

CVSS3: 6.5
EPSS: Средний
github логотип

GHSA-r929-j7c3-45vr

больше 3 лет назад

The External Media without Import WordPress plugin through 1.1.2 does not have any authorisation and does to ensure that medias added via URLs are external medias, which could allow any authenticated users, such as subscriber to perform blind SSRF attacks

CVSS3: 6.5
EPSS: Средний

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2022-1398

The External Media without Import WordPress plugin through 1.1.2 does not have any authorisation and does to ensure that medias added via URLs are external medias, which could allow any authenticated users, such as subscriber to perform blind SSRF attacks

CVSS3: 6.5
49%
Средний
больше 3 лет назад
github логотип
GHSA-r929-j7c3-45vr

The External Media without Import WordPress plugin through 1.1.2 does not have any authorisation and does to ensure that medias added via URLs are external medias, which could allow any authenticated users, such as subscriber to perform blind SSRF attacks

CVSS3: 6.5
49%
Средний
больше 3 лет назад

Уязвимостей на страницу