This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2024-0677 | BDVDB-2026-229088 Detail

Pz-LinkCard

Description#

The Pz-LinkCard WordPress plugin through 2.5.1 does not prevent users from pinging arbitrary hosts via some of its shortcodes, which could allow high privilege users such as contributors to perform SSRF attacks.

Impact#

Per CVSS v3.1: confidentiality impact low, integrity impact high, availability impact none. Attack vector: local.

Weaknesses#

  • CWE-918 Server-Side Request Forgery (SSRF)

References#

Exploit#

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.