Blind Server-Side Request Forgery in Platform.ly for WooCommerce Plugin

CVE-2024-13904

What is CVE-2024-13904?

The Platform.ly for WooCommerce plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to and including 1.1.6. This vulnerability allows unauthenticated attackers to initiate web requests directed at arbitrary locations utilizing the 'hooks' function. Exploiting this flaw can enable attackers to interact with and potentially alter information on internal services, thereby exposing sensitive data and compromising the integrity of the web application.

References