Filtered by vendor Wordpress-extensions
Subscriptions
Filtered by product Wooms
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-13700 | 1 Wordpress-extensions | 1 Wooms | 2026-11-11 | 5.9 Medium |
| The WooMS WordPress plugin through 9.14 does not validate a user-supplied URL before using it in a server-side request and attaches stored third-party integration credentials to every such request, allowing unauthenticated attackers to perform Server-Side Request Forgery and to disclose the configured integration credentials when the relevant data-sync feature is enabled. | ||||
Page 1 of 1.