Skip to content
OpenAdvisories

Product · Google

Web Stories

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.6
    CVE-2022-3708

    Web Stories <= 1.24.0 - Server Side Request Forgery

    The Web Stories plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including 1.24.0 due to insufficient validation of URLs supplied via the 'url' parameter found via the /v1/hotlink/proxy REST API Endpoint. This makes it …

    Google Web Stories Web / CMS