CVE-2022-1977
WP Ultimate CSV Importer < 6.5.3 - Admin+ Blind SSRF
- State
- Published
- Severity
- Not scored
- Published
- Jun 27, 2022
- Updated
- Aug 3, 2024
- Reserved
- Jun 2, 2022
Description
The Import Export All WordPress Images, Users & Post Types WordPress plugin before 6.5.3 does not fully validate the file to be imported via an URL before making an HTTP request to it, which could allow high privilege users such as admin to perform Blind SSRF attacks
Scores
The record has no CVSS score.
Weaknesses
- CWE-918 Server-Side Request Forgery (SSRF)
Affected Products
| Product | Versions |
|---|---|
Import Export All WordPress Images, Users & Post TypesUnknown |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.