Medium · 4.9 CVE-2023-46641 EUVD-2023-50843GHSA-5574-2w46-rvj9

WordPress 12 Step Meeting List Plugin <= 3.14.24 is vulnerable to Server Side Request Forgery (SSRF)

Published Dec 7, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Code for Recovery Product: 12 Step Meeting List

Description

Server-Side Request Forgery (SSRF) vulnerability in Code for Recovery 12 Step Meeting List.This issue affects 12 Step Meeting List: from n/a through 3.14.24.

Affected products

Vendor	Product	Affected	Fixed
Code for Recovery	12 Step Meeting List	≤ 3.14.24	—

References

https://patchstack.com/database/vulnerability/12-step-meeting-list/wordpress-12-step-meeting-list-plugin-3-14-24-server-side-request-forgery-ssrf-vulnerability?_s_id=cve vdb-entry