CWE-918: Server-Side Request Forgery (SSRF)

This vulnerability allows authenticated WordPress users with Subscriber-level access or higher to perform Server-Side Request Forgery (SSRF) attacks t...

The URL Media Uploader WordPress plugin has a Server-Side Request Forgery (SSRF) vulnerability that allows authenticated attackers with author-level p...

This Server-Side Request Forgery (SSRF) vulnerability in the Embed Any Document WordPress plugin allows authenticated attackers with Contributor acces...

The Code Embed WordPress plugin has a Server-Side Request Forgery vulnerability that allows authenticated attackers with contributor-level access or h...

This vulnerability in Discourse allows attackers to manipulate the FastImage library to redirect requests to internal Discourse IP addresses, potentia...

The TablePress WordPress plugin is vulnerable to Server-Side Request Forgery (SSRF) that allows authenticated attackers with author-level access or hi...

This vulnerability in bufanyun HotGo allows attackers to perform server-side request forgery (SSRF) attacks by manipulating the ImageTransferStorage f...

This vulnerability allows remote attackers to perform server-side request forgery (SSRF) attacks against welovemedia FFmate versions up to 2.0.15. Att...

This CVE describes a server-side request forgery (SSRF) vulnerability in DataLinkDC Dinky's Flink Proxy Controller. Attackers can exploit the proxyUba...

This CVE describes a server-side request forgery (SSRF) vulnerability in Tiandy Video Surveillance System version 7.17.0. Attackers can manipulate the...

This CVE describes a Server-Side Request Forgery (SSRF) vulnerability in JeecgBoot 3.9.0 that allows attackers to make the server send HTTP requests t...

This CVE describes a Server-Side Request Forgery (SSRF) vulnerability in huggingface smolagents 1.24.0. Attackers can exploit the LocalPythonExecutor ...

This CVE describes a Server-Side Request Forgery (SSRF) vulnerability in GeekAI versions up to 4.2.4. Attackers can manipulate the 'url' parameter in ...

This CVE describes a Server-Side Request Forgery (SSRF) vulnerability in lintsinghua DeepAudit versions up to 3.0.3. Attackers can exploit this vulner...

This CVE describes a Server-Side Request Forgery (SSRF) vulnerability in xiweicheng TMS up to version 2.28.0. Attackers can manipulate URL parameters ...

This CVE describes a Server-Side Request Forgery (SSRF) vulnerability in EyouCMS versions up to 1.7.7. Attackers can exploit the saveRemote function i...

This CVE describes a server-side request forgery (SSRF) vulnerability in YunaiV yudao-cloud's Business Process Management component. Attackers can man...

This CVE describes a Server-Side Request Forgery (SSRF) vulnerability in Local Deep Research's download service. Attackers can submit malicious URLs t...

This CVE describes a Server-Side Request Forgery (SSRF) vulnerability in PowerJob's network request handler. Attackers can manipulate targetIp/targetP...

This CVE describes a Server-Side Request Forgery (SSRF) vulnerability in the Yalantis uCrop Android library version 2.2.11. The vulnerability allows a...

This CVE describes a Server-Side Request Forgery (SSRF) vulnerability in orionsec's orion-ops software. Attackers can manipulate SSH connection parame...

This Server-Side Request Forgery (SSRF) vulnerability in deco-cx apps allows attackers to manipulate the AnalyticsScript function's URL parameter, for...

This CVE describes a server-side request forgery (SSRF) vulnerability in ZenTao's AI module. Attackers can exploit the makeRequest function in module/...

This CVE describes a Server-Side Request Forgery (SSRF) vulnerability in lKinderBueno Streamity Xtream IPTV Player versions up to 2.8. Attackers can e...

This CVE describes a Server-Side Request Forgery (SSRF) vulnerability in the WeRSS we-mp-rss Webhook module. Attackers can manipulate the web_hook_url...

This vulnerability in SeriaWei ZKEACMS allows attackers to perform server-side request forgery (SSRF) attacks by manipulating the Data argument in the...

This CVE describes a server-side request forgery (SSRF) vulnerability in Harness 3.3.0 that allows attackers to manipulate URL parameters in the Looku...

This CVE describes a Server-Side Request Forgery (SSRF) vulnerability in SourceCodester Link Status Checker 1.0 where manipulation of the 'proxy' para...

This CVE describes a Server-Side Request Forgery (SSRF) vulnerability in CRMEB versions up to 5.6.1. Attackers can manipulate the push_token_url param...

This CVE describes a Server-Side Request Forgery (SSRF) vulnerability in cdevroe unmark up to version 1.9.3. Attackers can manipulate the 'url' parame...

This is a Server-Side Request Forgery (SSRF) vulnerability in ChanCMS 3.3.0 that allows attackers to manipulate the taskUrl parameter to make the serv...

This CVE describes a Server-Side Request Forgery (SSRF) vulnerability in SimStudioAI sim software up to version 1.0.0. Attackers can manipulate the fi...

Authenticated users of Firecrawl could exploit a server-side request forgery (SSRF) vulnerability in the webhook functionality to send POST requests w...

This vulnerability in wangsongyan wblog 0.0.1 allows remote attackers to perform server-side request forgery (SSRF) attacks through the RestorePost fu...

This CVE describes a Server-Side Request Forgery (SSRF) vulnerability in the eventmesh-runtime module's WebhookUtil.java component. Attackers can expl...

This critical vulnerability in cloudfavorites favorites-web allows attackers to perform server-side request forgery (SSRF) attacks by manipulating the...

This critical vulnerability in Exrick xboot allows remote attackers to perform server-side request forgery (SSRF) attacks by manipulating the loginUrl...

This critical vulnerability in ChanCMS allows attackers to perform server-side request forgery (SSRF) by manipulating the targetUrl parameter in the g...

This critical Server-Side Request Forgery (SSRF) vulnerability in Xuxueli xxl-job allows attackers to make unauthorized requests from the vulnerable s...

This CVE-2025-7759 is a Server-Side Request Forgery (SSRF) vulnerability in thinkgem JeeSite's UEditor image grabber component. Attackers can manipula...

This critical Server-Side Request Forgery (SSRF) vulnerability in BoyunCMS allows attackers to make unauthorized requests from the vulnerable server t...

This critical vulnerability in diyhi bbs allows remote attackers to perform server-side request forgery (SSRF) by manipulating the Host header in the ...

This critical Server-Side Request Forgery (SSRF) vulnerability in Dromara MaxKey allows attackers to manipulate the Meta URL Handler to make unauthori...

This critical vulnerability in Intera InHire allows remote attackers to perform server-side request forgery (SSRF) by manipulating the '29chcotoo9' pa...

This critical SSRF vulnerability in quequnlong shiyi-blog allows attackers to make the server send unauthorized requests to internal or external syste...

This critical SSRF vulnerability in chshcms mccms 2.7 allows attackers to manipulate the 'pic' parameter to make the server send unauthorized requests...

This critical vulnerability in mymagicpower AIAS allows attackers to perform Server-Side Request Forgery (SSRF) by manipulating the 'url' parameter in...

This critical vulnerability in xujiangfei admintwo 1.0 allows remote attackers to perform server-side request forgery (SSRF) attacks by manipulating t...

This critical vulnerability in Youkefu 4.2.0 allows remote attackers to perform server-side request forgery (SSRF) attacks by manipulating the 'url' p...

ShopXO v6.4.0 contains a Server-Side Request Forgery (SSRF) vulnerability in its email settings functionality. This allows authenticated attackers to ...