Vulnerabilities and Security Researches

Pz-LinkCard, CVE-2024-0677

CVE, Research URL: CVE-2024-0677
Home page URL: Security reports for Pz-LinkCard
Application: Pz-LinkCard
Published on: Mar 28, 2024
Research Description: The Pz-LinkCard WordPress plugin through 2.5.1 does not prevent users from pinging arbitrary hosts via some of its shortcodes, which could allow high privilege users such as contributors to perform SSRF attacks.
Affected versions: max 2.5.3.
Status: vulnerable