← CVE Intelligence

CVE-2024-0677

Pz-LinkCard <= 2.5.1 - Contributor+ SSRF PUBLISHED

Description (CNA)

The Pz-LinkCard WordPress plugin through 2.5.1 does not prevent users from pinging arbitrary hosts via some of its shortcodes, which could allow high privilege users such as contributors to perform SSRF attacks.

Affected (CNA)

Vendor / productVersions
Unknown / Pz-LinkCardaffected 0 through 2.5.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.