Vulnerabilities > Server-Side Request Forgery (SSRF)

DATE CVE VULNERABILITY TITLE RISK
2025-01-03 CVE-2024-12237 The Photo Gallery Slideshow & Masonry Tiled Gallery plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.0.15 via the rjg_get_youtube_info_justified_gallery_callback function.
network
low complexity
CWE-918
4.3
4.3
2024-12-21 CVE-2024-51463 IBM i 7.3, 7.4, and 7.5 is vulnerable to server-side request forgery (SSRF).
network
low complexity
CWE-918
5.4
5.4
2024-12-20 CVE-2024-12840 A server-side request forgery exists in Satellite.
network
high complexity
CWE-918
5.0
5.0
2024-12-19 CVE-2024-49336 IBM Security Guardium 11.5 is vulnerable to server-side request forgery (SSRF).
network
low complexity
CWE-918
6.5
6.5
2024-12-19 CVE-2024-12121 The Broken Link Checker | Finder plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.5.0 via the 'moblc_check_link' function.
network
low complexity
CWE-918
5.4
5.4
2024-12-17 CVE-2024-9624 The WP All Import Pro plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.9.3 due to missing SSRF protection on the pmxi_curl_download function.
network
low complexity
CWE-918
7.6
7.6
2024-11-25 CVE-2024-6538 A flaw was found in OpenShift Console.
network
low complexity
CWE-918
5.3
5.3
2024-11-22 CVE-2024-9710 Server-Side Request Forgery (SSRF) vulnerability in Posthog
PostHog database_schema Server-Side Request Forgery Information Disclosure Vulnerability.
network
low complexity
posthog CWE-918
8.3
8.3
2024-11-12 CVE-2024-49521 Server-Side Request Forgery (SSRF) vulnerability in Adobe Commerce
Adobe Commerce versions 3.2.5 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to a security feature bypass.
network
low complexity
adobe CWE-918
7.7
7.7
2024-11-09 CVE-2024-10814 The Code Embed plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.5 via the ce_get_file() function.
network
low complexity
CWE-918
6.4
6.4