VULNERABILITY INTELLIGENCE

CVE-2013-0235

CVSS score6.4 MEDIUM
EPSS probability29.57%
CISA KEVNot currently listed
Published2013-07-08
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:N

Description

The XMLRPC API in WordPress before 3.5.1 allows remote attackers to send HTTP requests to intranet servers, and conduct port-scanning attacks, by specifying a crafted source URL for a pingback, related to a Server-Side Request Forgery (SSRF) issue.

Primary references