{"schemaVersion":3,"id":"CVE-2022-40700","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Server-Side Request Forgery (SSRF) vulnerability in Montonio Montonio for WooCommerce, Wpopal Wpopal Core Features, AMO for WP – Membership Management ArcStone wp-amo, Long Watch Studio WooVirtualWallet – A virtual wallet for WooCommerce, Long Watch Studio WooVIP – Membership plugin for WordPress and WooCommerce, Long Watch Studio WooSupply – Suppliers, Supply Orders and Stock Management, Squidesma Theme Minifier, Paul Clark Styles styles, Designmodo Inc. WordPress Page Builder – Qards, Philip M. Hofer (Frumph) PHPFreeChat, Arun Basil Lal Custom Login Admin Front-end CSS, Team Agence-Press CSS Adder By Agence-Press, Unihost Confirm Data, deano1987 AMP Toolbox amp-toolbox, Arun Basil Lal Admin CSS MU.This issue affects Montonio for WooCommerce: from n/a through 6.0.1; Wpopal Core Features: from n/a through 1.5.8; ArcStone: from n/a through 4.6.6; WooVirtualWallet – A virtual wallet for WooCommerce: from n/a through 2.2.1; WooVIP – Membership plugin for WordPress and WooCommerce: from n/a through 1.4.4; WooSupply – Suppliers, Supply Orders and Stock Management: from n/a through 1.2.2; Theme Minifier: from n/a through 2.0; Styles: from n/a through 1.2.3; WordPress Page Builder – Qards: from n/a through 1.0.5; PHPFreeChat: from n/a through 0.2.8; Custom Login Admin Front-end CSS: from n/a through 1.4.1; CSS Adder By Agence-Press: from n/a through 1.5.0; Confirm Data: from n/a through 1.0.7; AMP Toolbox: from n/a through 2.1.1; Admin CSS MU: from n/a through 2.6.","dates":{"published":"2024-01-19T14:30:11.427Z","modified":"2026-04-28T16:07:49.226Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.8,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":8.2,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"wordfence","score":8.3,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00999,"percentile":0.62209,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00999},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00999,"percentile":0.62209}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00999,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00999,"percentile":0.62209}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-918","name":"Server-Side Request Forgery (SSRF)","description":"The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/918.html"}],"affected":[{"vendor":"agence-press","product":"css_adder","name":"css adder","label":"css_adder","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.5.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.5.0","eol":null,"hubHref":"/vendor/agence-press/css_adder"},{"vendor":"amo for wp – membership management","product":"arcstone","name":"ArcStone","label":"arcstone","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ n/a, ≤ 4.6.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ n/a, ≤ 4.6.6","eol":null,"hubHref":"/vendor/amo_for_wp_-_membership_management/arcstone"},{"vendor":"arcstone","product":"amo_for_wp_-_membership_management","name":"amo for wp - membership management","label":"amo_for_wp_-_membership_management","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 4.6.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 4.6.6","eol":null,"hubHref":"/vendor/arcstone/amo_for_wp_-_membership_management"},{"vendor":"arun basil lal","product":"admin css mu","name":"Admin CSS MU","label":"admin css mu","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ n/a, ≤ 2.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ n/a, ≤ 2.6","eol":null,"hubHref":"/vendor/arun_basil_lal/admin_css_mu"},{"vendor":"arun basil lal","product":"custom login admin front-end css","name":"Custom Login Admin Front-end CSS","label":"custom login admin front-end css","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ n/a, ≤ 1.4.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ n/a, ≤ 1.4.1","eol":null,"hubHref":"/vendor/arun_basil_lal/custom_login_admin_front-end_css"},{"vendor":"deano","product":"amp_toolbox","name":"amp toolbox","label":"amp_toolbox","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 2.1.1","eol":null,"hubHref":"/vendor/deano/amp_toolbox"},{"vendor":"deano1987","product":"amp toolbox","name":"AMP Toolbox","label":"amp toolbox","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ n/a, ≤ 2.1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ n/a, ≤ 2.1.1","eol":null,"hubHref":"/vendor/deano1987/amp_toolbox"},{"vendor":"designmodo inc.","product":"wordpress page builder – qards","name":"WordPress Page Builder – Qards","label":"wordpress page builder – qards","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ n/a, ≤ 1.0.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ n/a, ≤ 1.0.5","eol":null,"hubHref":"/vendor/designmodo_inc/wordpress_page_builder_-_qards"},{"vendor":"designmodo","product":"qards","name":"qards","label":"qards","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.0.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.0.5","eol":null,"hubHref":"/vendor/designmodo/qards"},{"vendor":"frumph","product":"phpfreechat","name":"phpfreechat","label":"phpfreechat","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 0.2.8","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 0.2.8","eol":null,"hubHref":"/vendor/frumph/phpfreechat"},{"vendor":"long watch studio","product":"woosupply – suppliers, supply orders and stock management","name":"WooSupply – Suppliers, Supply Orders and Stock Management","label":"woosupply – suppliers, supply orders and stock management","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ n/a, ≤ 1.2.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ n/a, ≤ 1.2.2","eol":null,"hubHref":"/vendor/long_watch_studio/woosupply_-_suppliers_supply_orders_and_stock_management"},{"vendor":"long watch studio","product":"woovip – membership plugin for wordpress and woocommerce","name":"WooVIP – Membership plugin for WordPress and WooCommerce","label":"woovip – membership plugin for wordpress and woocommerce","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ n/a, ≤ 1.4.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ n/a, ≤ 1.4.4","eol":null,"hubHref":"/vendor/long_watch_studio/woovip_-_membership_plugin_for_wordpress_and_woocommerce"},{"vendor":"long watch studio","product":"woovirtualwallet – a virtual wallet for woocommerce","name":"WooVirtualWallet – A virtual wallet for WooCommerce","label":"woovirtualwallet – a virtual wallet for woocommerce","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ n/a, ≤ 2.2.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ n/a, ≤ 2.2.1","eol":null,"hubHref":"/vendor/long_watch_studio/woovirtualwallet_-_a_virtual_wallet_for_woocommerce"},{"vendor":"longwatchstudio","product":"woosupply","name":"woosupply","label":"woosupply","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.2.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.2.2","eol":null,"hubHref":"/vendor/longwatchstudio/woosupply"},{"vendor":"longwatchstudio","product":"woovip","name":"woovip","label":"woovip","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.4.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.4.4","eol":null,"hubHref":"/vendor/longwatchstudio/woovip"},{"vendor":"longwatchstudio","product":"woovirtualwallet","name":"woovirtualwallet","label":"woovirtualwallet","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.2.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 2.2.1","eol":null,"hubHref":"/vendor/longwatchstudio/woovirtualwallet"},{"vendor":"millionclues","product":"admin_css_mu","name":"admin css mu","label":"admin_css_mu","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 2.6","eol":null,"hubHref":"/vendor/millionclues/admin_css_mu"},{"vendor":"millionclues","product":"custom_login_admin_front-end_css","name":"custom login admin front-end css","label":"custom_login_admin_front-end_css","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.4.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.4.1","eol":null,"hubHref":"/vendor/millionclues/custom_login_admin_front-end_css"},{"vendor":"montonio","product":"montonio_for_woocommerce","name":"montonio for woocommerce","label":"montonio_for_woocommerce","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ n/a, ≤ 6.0.1","noFixRecorded":false,"fixedIn":null},{"text":"≤ 6.0.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ n/a, ≤ 6.0.1 | ≤ 6.0.1","eol":null,"hubHref":"/vendor/montonio/montonio_for_woocommerce"},{"vendor":"paul clark","product":"styles","name":"Styles","label":"styles","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ n/a, ≤ 1.2.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ n/a, ≤ 1.2.3","eol":null,"hubHref":"/vendor/paul_clark/styles"},{"vendor":"paulclark","product":"styles","name":"styles","label":"styles","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.2.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.2.3","eol":null,"hubHref":"/vendor/paulclark/styles"},{"vendor":"philip m. hofer (frumph)","product":"phpfreechat","name":"PHPFreeChat","label":"phpfreechat","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ n/a, ≤ 0.2.8","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ n/a, ≤ 0.2.8","eol":null,"hubHref":"/vendor/philip_m_hofer_frumph/phpfreechat"},{"vendor":"squidesma","product":"theme_minifier","name":"theme minifier","label":"theme_minifier","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ n/a, ≤ 2.0","noFixRecorded":false,"fixedIn":null},{"text":"≤ 2.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ n/a, ≤ 2.0 | ≤ 2.0","eol":null,"hubHref":"/vendor/squidesma/theme_minifier"},{"vendor":"team agence-press","product":"css adder by agence-press","name":"CSS Adder By Agence-Press","label":"css adder by agence-press","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ n/a, ≤ 1.5.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ n/a, ≤ 1.5.0","eol":null,"hubHref":"/vendor/team_agence-press/css_adder_by_agence-press"},{"vendor":"unihost","product":"confirm_data","name":"confirm data","label":"confirm_data","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ n/a, ≤ 1.0.7","noFixRecorded":false,"fixedIn":null},{"text":"≤ 1.0.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ n/a, ≤ 1.0.7 | ≤ 1.0.7","eol":null,"hubHref":"/vendor/unihost/confirm_data"},{"vendor":"wordpress","product":"admin-css-mu","name":"Admin CSS MU","label":"admin-css-mu","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.6 (fixed in 2.7)","noFixRecorded":false,"fixedIn":"2.7"}],"versionsText":"≤ 2.6 (fixed in 2.7)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"amp-toolbox","name":"AMP Toolbox","label":"amp-toolbox","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 2.1.1","eol":null,"hubHref":null},{"vendor":"wordpress","product":"confirm-data","name":"Confirm Data","label":"confirm-data","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.0.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.0.7","eol":null,"hubHref":null},{"vendor":"wordpress","product":"css-adder-by-agence-press","name":"CSS Adder By Agence-Press","label":"css-adder-by-agence-press","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.5.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.5.0","eol":null,"hubHref":null},{"vendor":"wordpress","product":"custom-login-admin-front-end-css-with-multisite-support","name":"Custom Login Admin Front-end CSS","label":"custom-login-admin-front-end-css-with-multisite-support","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.4.1 (fixed in 1.5)","noFixRecorded":false,"fixedIn":"1.5"}],"versionsText":"≤ 1.4.1 (fixed in 1.5)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"phpfreechat","name":"phpfreechat","label":"phpfreechat","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.0.8","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 2.0.8","eol":null,"hubHref":null},{"vendor":"wordpress","product":"qards-free","name":"WordPress Page Builder – Qards","label":"qards-free","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.0.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.0.5","eol":null,"hubHref":null},{"vendor":"wordpress","product":"styles","name":"Styles","label":"styles","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.2.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.2.3","eol":null,"hubHref":null},{"vendor":"wordpress","product":"theme-minifier","name":"Theme Minifier","label":"theme-minifier","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 2.0","eol":null,"hubHref":null},{"vendor":"wordpress","product":"woosupply","name":"WooSupply – Suppliers, Supply Orders and Stock Management","label":"woosupply","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.2.2.","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.2.2.","eol":null,"hubHref":null},{"vendor":"wordpress","product":"woovip","name":"WooVIP – Membership plugin for WordPress and WooCommerce","label":"woovip","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.4.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.4.4","eol":null,"hubHref":null},{"vendor":"wordpress","product":"woovirtualwallet","name":"WooVirtualWallet – A virtual wallet for WooCommerce","label":"woovirtualwallet","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.2.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 2.2.1","eol":null,"hubHref":null},{"vendor":"wordpress","product":"wp-amo","name":"AMO for WP  – Membership Management","label":"wp-amo","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 4.6.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 4.6.6","eol":null,"hubHref":null},{"vendor":"wordpress","product":"wpopal-core-features","name":"Wpopal Core Features","label":"wpopal-core-features","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.5.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.5.7","eol":null,"hubHref":null},{"vendor":"wpopal","product":"wpopal_core_features","name":"wpopal core features","label":"wpopal_core_features","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ n/a, ≤ 1.5.8","noFixRecorded":false,"fixedIn":null},{"text":"≤ 1.5.8","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ n/a, ≤ 1.5.8 | ≤ 1.5.8","eol":null,"hubHref":"/vendor/wpopal/wpopal_core_features"}],"affectedCount":40,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://patchstack.com/database/vulnerability/montonio-for-woocommerce/wordpress-montonio-for-woocommerce-plugin-6-0-1-server-side-request-forgery-ssrf?_s_id=cve","label":"patchstack.com/database/…","hostname":"patchstack.com","tags":["VDB Entry","Third Party Advisory"]},{"url":"https://patchstack.com/database/vulnerability/wpopal-core-features/wordpress-wpopal-core-features-plugin-1-5-7-server-side-request-forgery-ssrf?_s_id=cve","label":"patchstack.com/database/…","hostname":"patchstack.com","tags":["VDB Entry","Third Party Advisory"]},{"url":"https://patchstack.com/database/vulnerability/wp-amo/wordpress-amo-for-wp-plugin-4-6-6-server-side-request-forgery-ssrf?_s_id=cve","label":"patchstack.com/database/…","hostname":"patchstack.com","tags":["VDB Entry","Third Party Advisory"]},{"url":"https://patchstack.com/database/vulnerability/woovirtualwallet/wordpress-woovirtualwallet-plugin-2-2-1-server-side-request-forgery-ssrf?_s_id=cve","label":"patchstack.com/database/…","hostname":"patchstack.com","tags":["VDB Entry","Third Party Advisory"]},{"url":"https://patchstack.com/database/vulnerability/woovip/wordpress-woovip-plugin-1-4-4-server-side-request-forgery-ssrf?_s_id=cve","label":"patchstack.com/database/…","hostname":"patchstack.com","tags":["VDB Entry","Third Party Advisory"]},{"url":"https://patchstack.com/database/vulnerability/woosupply/wordpress-woosupply-plugin-1-2-2-server-side-request-forgery-ssrf?_s_id=cve","label":"patchstack.com/database/…","hostname":"patchstack.com","tags":["VDB Entry","Third Party Advisory"]},{"url":"https://patchstack.com/database/vulnerability/theme-minifier/wordpress-theme-minifier-plugin-2-0-server-side-request-forgery-ssrf?_s_id=cve","label":"patchstack.com/database/…","hostname":"patchstack.com","tags":["VDB Entry","Third Party Advisory"]},{"url":"https://patchstack.com/database/vulnerability/styles/wordpress-styles-plugin-1-2-3-server-side-request-forgery-ssrf?_s_id=cve","label":"patchstack.com/database/…","hostname":"patchstack.com","tags":["VDB Entry","Third Party Advisory"]},{"url":"https://patchstack.com/database/vulnerability/qards-free/wordpress-wordpress-page-builder-qards-plugin-1-0-5-server-side-request-forgery-ssrf?_s_id=cve","label":"patchstack.com/database/…","hostname":"patchstack.com","tags":["VDB Entry","Third Party Advisory"]},{"url":"https://patchstack.com/database/vulnerability/phpfreechat/wordpress-phpfreechat-plugin-0-2-8-server-side-request-forgery-ssrf?_s_id=cve","label":"patchstack.com/database/…","hostname":"patchstack.com","tags":["VDB Entry","Third Party Advisory"]},{"url":"https://patchstack.com/database/vulnerability/custom-login-admin-front-end-css-with-multisite-support/wordpress-custom-login-admin-front-end-css-plugin-1-4-1-server-side-request-forgery-ssrf?_s_id=cve","label":"patchstack.com/database/…","hostname":"patchstack.com","tags":["VDB Entry","Third Party Advisory"]},{"url":"https://patchstack.com/database/vulnerability/css-adder-by-agence-press/wordpress-css-adder-by-agene-press-plugin-1-5-0-server-side-request-forgery-ssrf?_s_id=cve","label":"patchstack.com/database/…","hostname":"patchstack.com","tags":["VDB Entry","Third Party Advisory"]},{"url":"https://patchstack.com/database/vulnerability/confirm-data/wordpress-confirm-data-plugin-1-0-7-unauth-server-side-request-forgery-ssrf-vulnerability?_s_id=cve","label":"patchstack.com/database/…","hostname":"patchstack.com","tags":["VDB Entry","Third Party Advisory"]},{"url":"https://patchstack.com/database/vulnerability/amp-toolbox/wordpress-amp-toolbox-plugin-2-1-1-server-side-request-forgery-ssrf?_s_id=cve","label":"patchstack.com/database/…","hostname":"patchstack.com","tags":["VDB Entry","Third Party Advisory"]},{"url":"https://patchstack.com/database/vulnerability/admin-css-mu/wordpress-admin-css-mu-plugin-2-6-server-side-request-forgery-ssrf-vulnerability?_s_id=cve","label":"patchstack.com/database/…","hostname":"patchstack.com","tags":["VDB Entry","Third Party Advisory"]},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fb534d86-c477-4a9c-b048-2fbc002168b2","label":"www.wordfence.com/threat-intel/vulnerabilities/id/fb534d86-c477-4a9c-b048-2fbc002168b2","hostname":"www.wordfence.com","tags":["Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2024-01-19T14:30:11.427Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-28T16:07:49.226Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T12:01:00.511Z","stale":false,"partial":false}}