CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
What the vulnerability does
The DK PDF – WordPress PDF Generator plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.3.0 via the 'addContentToMpdf' function. This makes it possible for authenticated attackers, author level and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.
Explanation of Vulnerability in Simple Terms
DK PDF – WordPress PDF Generator versions 2.3.0 and earlier contain a server-side request forgery vulnerability. An authenticated user can make the plugin send HTTP requests to internal or external systems on the attacker's behalf. The vulnerability requires a valid WordPress account but no special privileges. Impact is limited to information disclosure from systems the site can reach.
What an attacker can do
Make the site send HTTP requests to internal or external systems to read sensitive data.
Potential impact on your site
An authenticated user can probe your internal network or read data from external services your site can access.
Conditions required to exploit
Attacker must have a valid WordPress user account (any role). No user interaction required.
Key dates
External resources
