CVE-2022-1398CWE-918

CVE-2022-1398: falha em External Media without Import

External Media without Import <= 1.1.2 - Subscriber+ Blind SSRF

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar External Media without Import

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

18Vexday Risk Score

Corrija em breve. Ela tem exploit funcional público.

ssvc Attendepss 3.0%
The External Media without Import WordPress plugin through 1.1.2 does not have any authorisation and does to ensure that medias added via URLs are external medias, which could allow any authenticated users, such as subscriber to perform blind SSRF attacks
Produtos afetados
Unknown · External Media without Import