Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: Surniaulula Clear all filters
TI-2023-06392 CVE-2023-6991 · GHSA-r69x-4mjc-6rq7

JSM file_get_contents() Shortcode < 2.7.1 - Contributor+ SSRF

Priority HIGH 73

The JSM file_get_contents() Shortcode WordPress plugin before 2.7.1 does not validate one of its shortcode's parameters before making a request to it, which could allow users with contributor role and above to perform SS…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00694 Published 2024-01-15 Fixed in 2.7.1 CWE-918