Server Side Request Forgery (SSRF) exists in the Print My Blog plugin before 1.6.7 for WordPress via the site parameter. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
SSRF
WordPress
Print My Blog
NVD
GitHub
CVSS 3.0
9.8
EPSS
2.8%
An issue was discovered in AikCms v2.0. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
PHP
File Upload
Aikcms
NVD
GitHub
CVSS 3.0
8.8
EPSS
1.4%
An issue was discovered in AikCms v2.0. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
SQLi
PHP
Aikcms
NVD
GitHub
CVSS 3.0
7.2
EPSS
1.3%