CVE-2024-4469

May 31, 2024, 1:01 p.m.

Product(s) Impacted

WP STAGING WordPress Backup Plugin

before 3.5.0

Description

The WP STAGING WordPress Backup Plugin WordPress plugin before 3.5.0 does not prevent users with the administrator role from pinging conducting SSRF attacks, which may be a problem in multisite configurations.

Weaknesses

Date

Published: May 31, 2024, 6:15 a.m.

Last Modified: May 31, 2024, 1:01 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

contact@wpscan.com

References

https://wpscan.com/vulnerability/d6b1270b-52c0-471d-a5fb-507e21b46310/