Unauthorized Requests Vulnerability Affects Skitter Slideshow Plugin

CVE-2022-1751

Summary

The Skitter Slideshow plugin for WordPress is prone to a significant vulnerability that allows Server-Side Request Forgery (SSRF). Found in all versions up to and including 2.5.2, this flaw resides within the '/image.php' script. Unauthenticated attackers can exploit this vulnerability to send forged requests from the web application to malicious external locations, potentially gaining unauthorized access to and manipulating sensitive internal services. This underscores the need for website administrators to promptly update their plugins to mitigate the risk of exploitation.

References