Description
The Pz-LinkCard WordPress plugin before 2.5.7 does not validate a parameter before making a request to it, which could allow users with a role as low as Contributor to perform SSRF attack.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Pz-LinkCard | < 2.5.7 | 2.5.7 |
References
- https://wpscan.com/vulnerability/17104590-d84e-41b7-83ac-9b15fcfb537a/ exploit vdb-entry technical-description