PoC Index

CVE-2014-9038

MEDIUM 6.4EPSS 3.8%

wp-includes/http.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to conduct server-side request forgery (SSRF) attacks by referring to a 127.0.0.0/8 resource.

CVSS v2.0
6.4 MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N
EPSS
3.77% chance of exploitation in the next 30 days, 89th percentile
Nuclei
high
Published
2014-11-25
Updated
2024-08-06

Nuclei templates (1)

References

Related