CVE-2023-5974 Scanner
This scanner targets the 'path' parameter in download-file.php, allowing unauthenticated attackers to force the server into making arbitrary requests to internal or external resources.
9 assets checked · domain, subdomain, ipv4
CVE
CVE-2023-5974
9.8
CVSS
Description
The WPB Show Core WordPress plugin through 2.2 is vulnerable to server-side request forgery (SSRF) via the `path` parameter.
Attack Vector
-
Privileges Req.
-
User Interaction
-
wpb-show-core
Updated Nov 10, 2026View on NVD →
S4E scanner
CVE history: wpb-show-core
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →