medium4.3
CVE-2022-2912
The Craw Data WordPress plugin through 1.0.0 does not implement nonce checks, which could allow attackers to make a logged in admin change the url value perfor…
Impact
The Craw Data WordPress plugin through 1.0.0 does not implement nonce checks, which could allow attackers to make a logged in admin change the url value performing unwanted crawls on third-party sites (SSRF).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Craw-Data Project | Craw-Data | through 1.0.0 |