Description (CNA)
Featured Image from Content (featured-image-from-content) WordPress plugin versions prior to 1.7 contain an authenticated server-side request forgery vulnerability that allows Author-level users to fetch internal HTTP resources. Attackers can exploit insecure URL fetching and file write operations to retrieve sensitive internal data and store it in web-accessible upload directories.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Dhrumil Kumbhani / Featured Image from Content | affected 0 before 1.7 |
CWE
CWE-918
References
- https://wordpress.org/plugins/featured-image-from-content/
- https://www.vulncheck.com/advisories/featured-image-from-content-authenticated-ssrf-via-save-post
ADP enrichment
No English description supplied.
No references supplied.