CWE-918

The TablePress – Tables in WordPress made easy plugin for WordPress is vulnerable to Server-Side Request Forgery in all

Discourse is an open-source discussion platform. Prior to version 3.2.3 on the `stable` branch and version 3.3.0.beta4 o

Server-Side Request Forgery (SSRF) vulnerability in Bernhard Kux JSON Content Importer.This issue affects JSON Content I

The Remote Content Shortcode plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, an

The Code Embed plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2

Misskey is an open source, federated social media platform. Some APIs using `HttpRequestService` do not properly check t

A vulnerability, which was classified as critical, was found in Youke365 up to 1.5.3. Affected is an unknown function of

A vulnerability has been found in Youke365 up to 1.5.3 and classified as critical. Affected by this vulnerability is an

A vulnerability was found in Inis up to 2.0.1. It has been rated as critical. This issue affects some unknown processing

A vulnerability was found in ZhongFuCheng3y Austin 1.0. It has been rated as critical. Affected by this issue is the fun

A vulnerability was found in ZhiHuiYun up to 4.4.13 and classified as critical. This issue affects the function download

A vulnerability, which was classified as critical, has been found in Rebuild up to 3.5.5. Affected by this issue is the

A vulnerability was found in LangChain langchain_community 0.0.26. It has been classified as critical. Affected is the f

A vulnerability, which was classified as critical, has been found in lakernote EasyAdmin up to 20240315. This issue affe

A vulnerability, which was classified as critical, was found in lakernote EasyAdmin up to 20240315. Affected is the func

Mobile Security Framework (MobSF) is a security research platform for mobile applications in Android, iOS and Windows Mo

OneNav v0.9.35-20240318 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /index.php?c=ap

A vulnerability has been found in YouDianCMS 7 and classified as critical. Affected by this vulnerability is the functio

XML External Entity (XXE) vulnerability in Terminalfour 8.0.0001 through 8.3.18 and XML JDBC versions up to 1.0.4 allows

PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. It's possible for an attacker to constru

Mealie is a self hosted recipe manager and meal planner. Prior to 1.4.0, the scrape_image function will retrieve an imag

HCL BigFix Compliance server can respond with an HTTP status of 500, indicating a server-side error that may cause the s

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/mychann

memos is a privacy-first, lightweight note-taking service. In memos 0.13.2, an SSRF vulnerability exists at the /o/get/i

The Import WP WordPress plugin before 2.13.1 does not prevent users with the administrator role from pinging conducting

xtreme1 <= v0.9.1 contains a Server-Side Request Forgery (SSRF) vulnerability in the /api/data/upload path. The vulnerab

Server Side Request Forgery (SSRF) vulnerability in Likeshop before 2.5.7 allows attackers to view sensitive information

An issue was discovered in linqi before 1.4.0.1 on Windows. There is SSRF via Document template generation; i.e., via re

pictureproxy.php in the dirk1983 mm1.ltd source code f9f4bbc allows SSRF via the url parameter. NOTE: the references sec

memos is a privacy-first, lightweight note-taking service. In memos 0.13.2, an SSRF vulnerability exists at the /o/get/h

memos is a privacy-first, lightweight note-taking service. In memos 0.13.2, an SSRF vulnerability exists at the /api/res

A vulnerability in the /models/apply endpoint of mudler/localai versions 2.15.0 allows for Server-Side Request Forgery (

Server-side request forgery (SSRF) vulnerability that could allow a rogue server on the local network to modify its URL

The Friends plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.8.

Server-Side Request Forgery (SSRF) vulnerability in NiteoThemes CMP – Coming Soon & Maintenance.This issue affects CMP –

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticat

Server-Side Request Forgery (SSRF) vulnerability in Really Simple Plugins Really Simple SSL.This issue affects Really Si

A vulnerability was found in ShopXO up to 6.1.0. It has been declared as critical. Affected by this vulnerability is an

A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files on the und

IBM Maximo Spatial Asset Management 8.10 is vulnerable to server-side request forgery (SSRF). This may allow an authenti

A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build

A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build

A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build

A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build

The SuperFaktura WooCommerce plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, an

Server-Side Request Forgery (SSRF) vulnerability in Sirv CDN and Image Hosting Sirv sirv.This issue affects Sirv: from n

The CRM platform Twenty version 0.3.0 is vulnerable to SSRF via file upload.

Server-Side Request Forgery (SSRF) vulnerability in Brave Brave Popup Builder.This issue affects Brave Popup Builder: fr

Server-Side Request Forgery (SSRF) vulnerability in Podlove Podlove Podcast Publisher.This issue affects Podlove Podcast

Server-Side Request Forgery (SSRF) vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a throu