Skip to content
OpenAdvisories

Vendor

daschmi

2 known vulnerabilities.

Products

DS.DownloadList 1 GetContentFromURL 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2025-14613

    GetContentFromURL <= 1.0 - Authenticated (Contributor+) Server-Side Request Forgery via 'url' Shortcode Attribute

    The GetContentFromURL plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.0. This is due to the plugin using wp_remote_get() instead of wp_safe_remote_get() to fetch content from a user-supplied URL in the…

    daschmi GetContentFromURL Web / CMS