Düşük CVSS 3.8
CVE-2025-8594: CVE-2025-8594: güvenlik açığı
Açıklama (NVD)
The Pz-LinkCard WordPress plugin before 2.5.7 does not validate a parameter before making a request to it, which could allow users with a role as low as Contributor to perform SSRF attack.
Özet bilgiler
- CVSS v3.1
- 3.8
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N - EPSS
- %0,23 (yüzdelik 14)
- Yama
- Yok / bilinmiyor