WordPress Plugin Vulnerabilities

Print My Blog <= 1.6.5 - Unauthenticated Server Side Request Forgery (SSRF)

Description

The Print My Blog – Print, PDF, & eBook Converter WordPress Plugin WordPress plugin was affected by an Unauthenticated Server Side Request Forgery (SSRF) security vulnerability.

Affects Plugins

Plugin icon
print-my-blog
Fixed in 1.6.6

References

CVE
CVE-2019-11565
URL
http://dumpco.re/bugs/wp-plugin-print-my-blog-ssrf
URL
https://plugins.trac.wordpress.org/changeset?old_path=%2Fprint-my-blog%2Ftrunk&old=2075667&new_path=%2Fprint-my-blog%2Ftrunk&new=2075667
URL
https://github.com/mnelson4/printmyblog/commit/8584a2839a541eb29fca64252e388c827af3ec21

Classification

Type
SSRF
OWASP top 10
A1: Injection
CWE
CWE-918
CVSS
9.8 (critical)

Miscellaneous

Original Researcher
Magnus K. Stubman
Submitter
Ryan Dewhurst
Submitter website
https://wpscan.io
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
221f5ce6-da21-4ab6-b194-fca6a9e8fd9a

Timeline

Publicly Published
2019-04-27 (about 7 years ago)
Added
2019-04-27 (about 7 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2023-05-02
Title
Orbit Fox < 2.10.24 - Author+ Server-Side Request Forgery
Published
2023-11-28
Title
CommentLuv <= 4 - Unauthenticated SSRF
Published
2026-03-19
Title
Nelio Content < 4.3.2 - Authenticated (Contributor+) Server-Side Request Forgery
Published
2025-03-06
Title
Platform.ly for WooCommerce < 1.1.7 - Unauthenticated Blind Server-Side Request Forgery
Published
2025-12-24
Title
Link Library < 7.8.8 - Authenticated (Contributor+) Server-Side Request Forgery