CVE-2019-16932 - A blind SSRF vulnerability exists in the Visualizer plugin before 3.3.1 for WordPress via wp-json/visualizer/v1/upload-data

CRITICAL

A blind SSRF vulnerability exists in the Visualizer plugin before 3.3.1 for WordPress via wp-json/visualizer/v1/upload-data

Published Sep 30, 2019

10.0

CRITICAL

CVSS 3.1

EPSS 39.14%

A blind SSRF vulnerability exists in the Visualizer plugin before 3.3.1 for WordPress via wp-json/visualizer/v1/upload-data.

No remediation recorded yet.

Weaknesses (1)

CWE-918

SSRF

Link	Providers	Tags
https://nathandavison.com/blog/wordpress-visualizer-plugin-xss-and-ssrf		x_refsource_MISCExploitThird Party Advisory
https://wordpress.org/plugins/visualizer/#developers		x_refsource_MISCProductThird Party Advisory
https://wpvulndb.com/vulnerabilities/9892		x_refsource_MISCThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Sep 30, 2019

Updated Aug 5, 2024

Reserved Sep 27, 2019

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a