CVE-2019-11565

CRITICAL

Print My Blog < 1.6.7 - Server-Side Request Forgery via Site Parameter

Title source: llm
STIX 2.1

Description

Server Side Request Forgery (SSRF) exists in the Print My Blog plugin before 1.6.7 for WordPress via the site parameter.

References (5)

Core 5
Core References
Exploit, Issue Tracking, Third Party Advisory x_refsource_misc
http://dumpco.re/bugs/wp-plugin-print-my-blog-ssrf
Release Notes, Third Party Advisory x_refsource_misc
https://wordpress.org/plugins/print-my-blog/#developers
Third Party Advisory x_refsource_misc
https://wpvulndb.com/vulnerabilities/9263

Scores

CVSS v3 9.8
EPSS 0.0282
EPSS Percentile 84.8%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-918
Status published
Products (1)
print_my_blog_project/print_my_blog < 1.6.7
Published Apr 27, 2019
Tracked Since Feb 18, 2026