4.3
Medium
CVE-2022-2912 The Craw Data WordPress plugin through 1.0.0 does not implement nonce checks, which could allow attackers to make a…
Description
The Craw Data WordPress plugin through 1.0.0 does not implement nonce checks, which could allow attackers to make a logged in admin change the url value performing unwanted crawls on third-party sites (SSRF).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Craw Data | 1.0.0 | No fix stated |