Test ID:	1.3.6.1.4.1.25623.1.0.124730
Category:	Web application abuses
Title:	WordPress TablePress Plugin < 2.3.2 SSRF Vulnerability
Summary:	The WordPress plugin 'TablePress' is prone to a server-side; request forgery (SSRF) vulnerability.
Description:	Summary: The WordPress plugin 'TablePress' is prone to a server-side request forgery (SSRF) vulnerability. Vulnerability Insight: The plugin is vulnerable to server-side request forgery via the get_files_to_import() function. Affected Software/OS: WordPress TablePress plugin prior to version 2.3.2. Solution: Update to version 2.3.2 or later. CVSS Score: 5.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2024-4354 https://plugins.trac.wordpress.org/browser/tablepress/trunk/classes/class-import.php#L125 https://plugins.trac.wordpress.org/browser/tablepress/trunk/classes/class-import.php#L141 https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3097113%40tablepress&new=3097113%40tablepress&sfp_email=&sfph_mail= https://www.clear-gate.com/blog/ssrf-with-dns-rebinding-2/ https://www.wordfence.com/threat-intel/vulnerabilities/id/879384eb-bfea-4667-a7de-9f723dbea74b?source=cve
Copyright	Copyright (C) 2025 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.