mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-12 09:21:42 +02:00
756 B
756 B
CVE-2023-5798
Description
The Assistant WordPress plugin before 1.4.4 does not validate a parameter before making a request to it via wp_remote_get(), which could allow users with a role as low as Editor to perform SSRF attacks
POC
Reference
Github
No PoCs found on GitHub currently.