Valatty

**Name of the Vulnerable Software and Affected Versions** WP Scraper plugin for WordPress versions prior to 5.8.2 **Description** The WP Scraper plugin for WordPress is susceptible to Server-Side Request Forgery (SSRF) in versions up to and including 5.8.1. This flaw resides within the `wp scraper extract content` function and permits authenticated attackers possessing Administrator-level privileges or higher to initiate web requests to arbitrary locations from the web application. This capability can be leveraged to query and modify information from internal services. In Cloud environments, this issue enables the retrieval of metadata. **Recommendations** Update the WP Scraper plugin to version 5.8.2 or later.