WPB Show Core <= 2.2 - Unauthenticated Server Side Request Forgery
18Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 3.1%
exploitation probability
3.1%top 13% of all CVEs
observed exploitation
nono source reports it
The WPB Show Core WordPress plugin through 2.2 is vulnerable to server-side request forgery (SSRF) via the `path` parameter.
Affected products
Unknown · wpb-show-core