CVEvulnerability

CVE-2024-0677

5.1 MEDIUM Published 2024-03-28 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-03-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
5.1 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N
Weaknesses
CWE-918

Description

The Pz-LinkCard WordPress plugin through 2.5.1 does not prevent users from pinging arbitrary hosts via some of its shortcodes, which could allow high privilege users such as contributors to perform SSRF attacks.

Affected configurations

• popozure pz-linkcard (< 2.5.3)

Related

Weakness · CWE (1)

  • CWE-918 Server-Side Request Forgery weakness

References