CVE-2023-46641 WordPress 12 Step Meeting List Plugin <= 3.14.24 is vulnerable to Server Side Request Forgery (SSRF)
MediumCVSS 5.4
EPSS 0.31%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Server-Side Request Forgery (SSRF) vulnerability in Code for Recovery 12 Step Meeting List.This issue affects 12 Step Meeting List: from n/a through 3.14.24.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Code for Recovery 12 Step Meeting List | < 3.14.25 | 3.14.25 |
| wordpress 12-step-meeting-list(WordPress) | < 3.14.25 | 3.14.25 |
| code4recovery 12 step meeting list | < 3.14.25 | 3.14.25 |
References
- patchstack.com third-party-advisory vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org