CVE-2014-8749

Currently unrated

Key Information:

Vendor
Wordpress
Status
Bulletproof Security
Vendor
CVE Published:
1 December 2014

Summary

Server-side request forgery (SSRF) vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote attackers to trigger outbound requests that authenticate to arbitrary databases via the dbhost parameter.

References

http://seclists.org/fulldisclosure/2014/Nov/13
mailing-listx_refsource_FULLDISC
https://wordpress.org/plugins/bulletproof-security/change...
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.