CVE-2019-16932

CVE-2019-16932

EPSS 39.1%

A blind SSRF vulnerability exists in the Visualizer plugin before 3.3.1 for WordPress via wp-json/visualizer/v1/upload-data.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://nathandavison.com/blog/wordpress-visualizer-plugin-xss-and-ssrf https://wordpress.org/plugins/visualizer/#developers https://wpvulndb.com/vulnerabilities/9892