Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2023-6991

JSM file_get_contents() Shortcode < 2.7.1 - Contributor+ SSRF

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The JSM file_get_contents() Shortcode WordPress plugin before 2.7.1 does not validate one of its shortcode's parameters before making a request to it, which could allow users with contributor role and above to perform SSRF attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown JSM file_get_contents() Shortcode

Default version status: unaffected

  • 0 to < 2.7.1affected

References