CVE-2022-2912

PoC —

CVSS 3.1

4.3 medium

EPSS

<1%p50

Published

Sep 16, 2022 (Sep 16, 2022)

Modified

Jun 17, 2026

Description

The Craw Data WordPress plugin through 1.0.0 does not implement nonce checks, which could allow attackers to make a logged in admin change the url value performing unwanted crawls on third-party sites (SSRF).

Vendors: craw-data project
Products: craw-data
Ecosystems: WordPress
Weakness: CWE-918
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.