Threats tagged 'ghsa-jmr2-v244-x8cp'

A Server-Side Request Forgery (SSRF) vulnerability exists in the WP Data Access WordPress plugin before version 5.5.88. The flaw arises because one of the plugin's actions lacks authorization and CSRF protections, allowing any authenticated user, including low-privileged roles like subscribers, to make the server connect to arbitrary hosts and ports and read the response.