CVE-2022-1398CWE-918

CVE-2022-1398: fallo en External Media without Import

External Media without Import <= 1.1.2 - Subscriber+ Blind SSRF

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear External Media without Import

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

18Vexday Risk Score

Corrige pronto. Ella tiene exploit funcional público.

ssvc Attendepss 3.0%
The External Media without Import WordPress plugin through 1.1.2 does not have any authorisation and does to ensure that medias added via URLs are external medias, which could allow any authenticated users, such as subscriber to perform blind SSRF attacks
Productos afectados
Unknown · External Media without Import