WordPress Plugin Vulnerabilities

WordPress Picture / Portfolio / Media Gallery <= 3.0.1 - Unauthenticated Server-Side Request Forgery

Description

The WordPress Picture / Portfolio / Media Gallery plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.0.1 via the 'file_get_contents' function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.

Affects Plugins

Plugin icon
nimble-portfolio
No known fix

References

CVE
CVE-2024-5021
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/224a2d6d-7fdc-43a8-a8c9-26213b604433

Classification

Type
SSRF
OWASP top 10
A1: Injection
CWE
CWE-918
CVSS
9.3 (critical)

Miscellaneous

Original Researcher
Francesco Carlucci
Verified
No
WPVDB ID
4f0f8a68-3d6e-4489-b0df-b7ad6e59bed7

Timeline

Publicly Published
2024-06-18 (about 1 year ago)
Added
2024-06-18 (about 1 year ago)
Last Updated
2024-06-19 (about 1 year ago)

Other

Published
Title
Published
2025-11-05
Title
Blog2Social: Social Media Auto Post & Scheduler < 8.6.1 - Authenticated (Subscriber+) Blind Server-Side Request Forgery via post_url
Published
2025-01-25
Title
Multiple Page Generator Plugin – MPG < 4.0.6 - Authenticated (Editor+) Server-Side Request Forgery via fileUrl
Published
2014-08-01
Title
WordPress 1.5.1-3.5 - XML-RPC Pingback API Internal/External Port Scanning
Published
2025-09-22
Title
Beaf <= 1.6.2 - Authenticated (Admin+) Server-Side Request Forgery
Published
2019-04-27
Title
Print My Blog <= 1.6.5 - Unauthenticated Server Side Request Forgery (SSRF)