Threats tagged 'ghsa-rqm6-jmg2-pgr4'

The Blog2Social WordPress plugin up to version 8.6.0 contains a Server-Side Request Forgery (SSRF) vulnerability in the getFullContent() function. Authenticated users with Subscriber-level access or higher can exploit this flaw to make arbitrary web requests from the server, potentially accessing or modifying internal services. The vulnerability has a medium severity score of 5.3 CVSS v3.1. No public exploits or patches are currently documented.