WordPress · Import Wp · CVE-2023-7253
**Name of the Vulnerable Software and Affected Versions**
Import WP WordPress plugin versions prior to 2.13.1
**Description**
The issue allows users with the administrator role to conduct SSRF attacks, which may be a problem in multisite configurations. This is due to the lack of prevention of pinging by users with the administrator role.
**Recommendations**
For versions prior to 2.13.1, update to version 2.13.1 or later to resolve the issue. As a temporary workaround, consider restricting the administrator role's capabilities to minimize the risk of exploitation.