CVSS: 10.0EPSS: 30%CPEs: 15EXPL: 0CVE-2022-40700 – Server Side Request Forgery (SSRF) vulnerability affecting multiple WordPress plugins
https://notcve.org/view.php?id=CVE-2022-40700
03 Mar 2023 — Server-Side Request Forgery (SSRF) vulnerability in Montonio Montonio for WooCommerce, Wpopal Wpopal Core Features, AMO for WP – Membership Management ArcStone wp-amo, Long Watch Studio WooVirtualWallet – A virtual wallet for WooCommerce, Long Watch Studio WooVIP – Membership plugin for WordPress and WooCommerce, Long Watch Studio WooSupply – Suppliers, Supply Orders and Stock Management, Squidesma Theme Minifier, Paul Clark Styles styles, Designmodo Inc. WordPress Page Builder – Qards, Philip M. Hofer (Fru... • https://patchstack.com/database/vulnerability/admin-css-mu/wordpress-admin-css-mu-plugin-2-6-server-side-request-forgery-ssrf-vulnerability?_s_id=cve • CWE-918: Server-Side Request Forgery (SSRF) •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 3CVE-2018-5954 – PHPFreeChat 1.7 - Denial of Service
https://notcve.org/view.php?id=CVE-2018-5954
24 Jan 2018 — phpFreeChat 1.7 and earlier allows remote attackers to cause a denial of service by sending a large number of connect commands. phpFreeChat 1.7 y anteriores permite que los atacantes remotos provoquen una denegación de servicio (DoS) enviando un número grande de comandos connect. PHPFreeChat version 1.7 suffers from a denial of service vulnerability. • https://packetstorm.news/files/id/146037 • CWE-400: Uncontrolled Resource Consumption •