CVE-2025-10705
|
| |
|
|
Software afectado |
WORDPRESS |
|
|
|
The MxChat – AI Chatbot for WordPress plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.4.6. This is due to insufficient validation of user-supplied URLs in the PDF processing functionality. This makes it possible for unauthenticated attackers to make the WordPress server perform HTTP requests to arbitrary destinations via the mxchat_handle_chat_request AJAX action. |
Link: |
| https://nvd.nist.gov/vuln/detail/CVE-2025-10705 |
