Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2024-4260

CoBlocks < 3.1.12 - Contributor+ SSRF

Description

The Page Builder Gutenberg Blocks WordPress plugin before 3.1.12 does not prevent users from pinging arbitrary hosts via some of its shortcodes, which could allow high privilege users such as contributors to perform SSRF attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Page Builder Gutenberg Blocks

Default version status: unaffected

  • 0 to < 3.1.12affected

References