Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2022-3590

WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.208
EPSS Ranking 95.2%
CVSS Severity
CVSS v3 Score 5.9
Products affected by CVE-2022-3590


Contact Us

Shodan ® - All rights reserved