Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin Web Stories Server-Side Request Forgery - CVE-2022-3708 - Vulnerability Database
WP Plugin Web Stories

WordPress Plugin Web Stories Server-Side Request Forgery - CVE-2022-3708

Critical
Reference: CVE-2022-3708
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2022-3708
Title: WordPress Plugin Web Stories Server-Side Request Forgery
Overview:

WordPress Plugin Web Stories is prone to a server-side request forgery vulnerability. An attacker may leverage this issue to make the vulnerable server perform port scanning of hosts in internal or external networks other attacks are also possible. WordPress Plugin Web Stories version 1.24.0 is vulnerable prior versions may also be affected.