WordPress Task Scheduler Plugin Server-Side Request Forgery Vulnerability
Vulnerability
A server-side request forgery (SSRF) vulnerability has been identified in the Task Scheduler plugin for WordPress, affecting all versions through 1.6.3. This vulnerability allows authenticated attackers with Administrator-level access to make web requests to arbitrary locations from the web application, potentially querying and modifying information from internal services.
Impact
Exploitation of this vulnerability could lead to unauthorized web requests being made from the WordPress application, allowing attackers to access or alter information from internal services.
Remediation
No known patch is available. It is recommended to review the vulnerability details and consider uninstalling the affected plugin.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.