Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2022-3590

WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.104
EPSS Ranking 93.0%
CVSS Severity
CVSS v3 Score 5.9
Products affected by CVE-2022-3590


Contact Us

Shodan ® - All rights reserved