CVE-2022-1398CWE-918

External Media without Import <= 1.1.2 - Subscriber+ Blind SSRF

published May 16, 2022

CVSS
—
EPSS
3%
Percentile
87.2
In the wild
Unconfirmed
What it is

The External Media without Import WordPress plugin through 1.1.2 does not have any authorisation and does to ensure that medias added via URLs are external medias, which could allow any authenticated users, such as subscriber to perform blind SSRF attacks

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02976 · 87.2th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2022-05-16T14:30Z
EPSS history
Timeline
  • 16 MAY 14:30Z
    External Media without Import <= 1.1.2 - Subscriber+ Blind SSRF
    cvelistv5