Threats tagged 'ghsa-mhrm-79mh-vhfj'

A Server-Side Request Forgery (SSRF) vulnerability exists in the Newsletters WordPress plugin before version 4.16. The plugin does not authenticate or validate bounce-processing requests before fetching user-supplied URLs, allowing unauthenticated attackers to make the server issue requests to arbitrary internal or external hosts. This vulnerability has a high severity with a CVSS score of 8.2.