CVE-2023-5798 | BDVDB-2026-215217 Detail

Description#

The Assistant WordPress plugin before 1.4.4 does not validate a parameter before making a request to it via wp_remote_get(), which could allow users with a role as low as Editor to perform SSRF attacks

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12023-10-26Record published in the CVE List.
2. Version 22025-04-23Most recent update recorded in the CVE List.