logo

Database

Server-side request forgery (SSRF) In wordpress

Description

WordPress before 5.2.4 has a Server Side Request Forgery (SSRF) vulnerability because URL validation does not consider the interpretation of a name as a series of hex characters.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2019-176692. NVD-2019-176693. OSV-DEBIAN-2019-176694. OSV-2019-176695. SECURITY-TRACKER-CVE-2019-17669

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.