Advisories · Technology
stefanbohacek fediverse-embeds-wordpress-plugin.
Every CVE that names stefanbohacek fediverse-embeds-wordpress-plugin among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Fediverse Embeds: Unauthenticated SSRF / open proxy via REST media-proxy endpoint
- stefanbohacek fediverse-embeds-wordpress-plugin
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
Fediverse Embeds: Public-nonce SSRF via ftf_get_site_info AJAX action
- stefanbohacek fediverse-embeds-wordpress-plugin
- Server-side request forgery (SSRF)