Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Mr Empy

#46357of 56,330
6.1Total CVSS
Vulnerabilities · 1
PT-2024-15253
6.1
2024-04-24
WordPress · Import Wp · CVE-2023-7253
**Name of the Vulnerable Software and Affected Versions** Import WP WordPress plugin versions prior to 2.13.1 **Description** The issue allows users with the administrator role to conduct SSRF attacks, which may be a problem in multisite configurations. This is due to the lack of prevention of pinging by users with the administrator role. **Recommendations** For versions prior to 2.13.1, update to version 2.13.1 or later to resolve the issue. As a temporary workaround, consider restricting the administrator role's capabilities to minimize the risk of exploitation.