Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Mr Empy

#43051of 53,633
6.1Total CVSS
Vulnerabilities · 1
PT-2024-15253
6.1
2024-04-24
WordPress · Import Wp · CVE-2023-7253
**Name of the Vulnerable Software and Affected Versions** Import WP WordPress plugin versions prior to 2.13.1 **Description** The issue allows users with the administrator role to conduct SSRF attacks, which may be a problem in multisite configurations. This is due to the lack of prevention of pinging by users with the administrator role. **Recommendations** For versions prior to 2.13.1, update to version 2.13.1 or later to resolve the issue. As a temporary workaround, consider restricting the administrator role's capabilities to minimize the risk of exploitation.