Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2023-6991

JSM file_get_contents() Shortcode < 2.7.1 - Contributor+ SSRF

The JSM file_get_contents() Shortcode WordPress plugin before 2.7.1 does not validate one of its shortcode's parameters before making a request to it, which could allow users with contributor role and above to perform SSRF attacks.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Surniaulula
Products
Jsm File Get Contents\(\) Shortcode