CVEvulnerability

CVE-2024-4260

6.5 MEDIUM Published 2024-07-23 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-07-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-918

Description

The Page Builder Gutenberg Blocks WordPress plugin before 3.1.12 does not prevent users from pinging arbitrary hosts via some of its shortcodes, which could allow high privilege users such as contributors to perform SSRF attacks.

Affected configurations

• godaddy coblocks (< 3.1.12)

Related

Weakness · CWE (1)

  • CWE-918 Server-Side Request Forgery weakness

References