CRITICAL
Server Side Request Forgery (SSRF) exists in the Print My Blog plugin before 1.6.7 for WordPress via the site parameter
Published Apr 27, 2019
9.8
CRITICALCVSS 3.0
EPSS 2.82%
Description
Server Side Request Forgery (SSRF) exists in the Print My Blog plugin before 1.6.7 for WordPress via the site parameter.
Affected products
No data.
- < 1.6.7
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (6)
- http://dumpco.re/bugs/wp-plugin-print-my-blog-ssrf x_refsource_MISCExploitIssue TrackingThird Party Advisory
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-3236 Advisory
- https://github.com/mnelson4/printmyblog/commit/8584a2839a541eb29fca64252e388c827af3ec21 x_refsource_MISCPatchThird Party Advisory
- https://plugins.trac.wordpress.org/changeset?old_path=%2Fprint-my-blog%2Ftrunk&old=2075667&new_path=%2Fprint-my-blog%2Ftrunk&new=2075667 x_refsource_MISCPatchThird Party Advisory
- https://wordpress.org/plugins/print-my-blog/#developers x_refsource_MISCRelease NotesThird Party Advisory
- https://wpvulndb.com/vulnerabilities/9263 x_refsource_MISCThird Party Advisory
| Link | Providers | Tags |
|---|---|---|
| http://dumpco.re/bugs/wp-plugin-print-my-blog-ssrf | x_refsource_MISCExploitIssue TrackingThird Party Advisory | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-3236 | Advisory | |
| https://github.com/mnelson4/printmyblog/commit/8584a2839a541eb29fca64252e388c827af3ec21 | x_refsource_MISCPatchThird Party Advisory | |
| https://plugins.trac.wordpress.org/changeset?old_path=%2Fprint-my-blog%2Ftrunk&old=2075667&new_path=%2Fprint-my-blog%2Ftrunk&new=2075667 | x_refsource_MISCPatchThird Party Advisory | |
| https://wordpress.org/plugins/print-my-blog/#developers | x_refsource_MISCRelease NotesThird Party Advisory | |
| https://wpvulndb.com/vulnerabilities/9263 | x_refsource_MISCThird Party Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Apr 27, 2019
Updated Aug 4, 2024
Reserved Apr 27, 2019
Link CVE-2019-11565
CISA Vulnrichment
No data
Red Hat
No data
GitHub
No data