Description
The WooMS WordPress plugin through 9.14 does not validate a user-supplied URL before using it in a server-side request and attaches stored third-party integration credentials to every such request, allowing unauthenticated attackers to perform Server-Side Request Forgery and to disclose the configured integration credentials when the relevant data-sync feature is enabled.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | WooMS | ≤ 9.14 | — |
References
- https://wpscan.com/vulnerability/dd9e51a2-43fb-46de-8e59-2d9611fcc4ff/ exploit vdb-entry technical-description