WordPress before 5.2.4 has a Server Side Request Forgery (SSRF) vulnerability because URL validation does not consider the interpretation of a name as a series of hex characters.

Related CVEs

CVE-2019-17669

Key Information

GHSA ID

GHSA-rrjm-x5m6-q2pg

Published

May 24, 2022 4:59 PM

Last Modified

February 4, 2023 12:30 AM

CVSS Score

9.0 /10

Primary Ecosystem

Unknown

Primary Package

Unknown

GitHub Reviewed

✗ No

Dataset

Last updated: September 29, 2025 6:31 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.