WordPress Vulnerabilities

WordPress 3.5-3.5.1 HTTP API Unspecified Server Side Request Forgery (SSRF)

Affects WordPress

3.5.1
Fixed in WordPress 3.5.2

Classification

Type
SSRF
OWASP top 10
A1: Injection
CWE
CWE-918

Miscellaneous

Verified
No
WPVDB ID
02acf85d-6c46-4047-b2eb-3eb1c1700f33

Timeline

Publicly Published
2013-06-21 (about 12 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-08-26 (about 6 years ago)

Other

Published
Title
Published
2025-02-27
Title
URL Media Uploader < 1.0.1 - Authenticated (Author+) Server-Side Request Forgery via DNS Rebinding
Published
2024-12-18
Title
Broken Link Checker | Finder < 2.5.1 - Authenticated (Author+) Blind Server-Side Request Forgery
Published
2026-02-18
Title
Printful Integration for WooCommerce < 2.2.12 - Authenticated (Contributor+) Server-Side Request Forgery
Published
2023-11-06
Title
WPB Show Core <= 2.2 - Unauthenticated Server Side Request Forgery
Published
2024-04-05
Title
RapidLoad Power-Up for Autoptimize < 2.2.12 - Unauthenticated Server-Side Request Forgery