CVE-2022-1398 — External Media without Import <= 1.1.2 - Subscriber+ Blind SSRF
The External Media without Import WordPress plugin through 1.1.2 does not have any authorisation and does to ensure that medias added via URLs are external medias, which could a…
Published: 2022-05-16 · CVSS: Unscored
The External Media without Import WordPress plugin through 1.1.2 does not have any authorisation and does to ensure that medias added via URLs are external medias, which could allow any authenticated users, such as subscriber to perform blind SSRF attacks
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7