Skip to content
OpenAdvisories
Unscored CVE-2022-1037 EUVD-2022-24384GHSA-52rg-37rg-rfhm

EXMAGE < 1.0.7 - Admin+ Blind SSRF

Published Apr 18, 2022 · Updated Aug 2, 2024 · Assigned by WPScan

Description

The EXMAGE WordPress plugin before 1.0.7 does to ensure that images added via URLs are external images, which could lead to a blind SSRF issue by using local URLs

Affected products

VendorProductAffectedFixed
— EXMAGE – WordPress Image Links 1.0.7 – < 1.0.7 1.0.7

References