CVE-2019-16932

Name of the Vulnerable Software and Affected Versions Visualizer plugin versions prior to 3.3.1 for WordPress

Description A blind SSRF issue exists in the Visualizer plugin for WordPress. The issue can be exploited via the "wp-json/visualizer/v1/upload-data" API endpoint.

Recommendations For versions prior to 3.3.1, update to version 3.3.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the "wp-json/visualizer/v1/upload-data" API endpoint until a patch is applied.