CVE-2024-4354

The TablePress – Tables in WordPress made easy plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.3 via the get_files_to_import() function. This makes it possible for authenticated attackers, with author-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. Due to the complex nature of protecting against DNS rebind attacks in WordPress software, we settled on the developer simply restricting the usage of the URL import functionality to just administrators. While this is not optimal, we feel this poses a minimal risk to most site owners and ideally WordPress core would correct this issue in wp_safe_remote_get() and other functions.

• CWE-918
• CWE-918

• https://plugins.trac.wordpress.org/browser/tablepress/trunk/classes/class-import.php#L125Patch
• https://plugins.trac.wordpress.org/browser/tablepress/trunk/classes/class-import.php#L141Patch
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3097113%40tablepress&new=3097113%40tablepress&sfp_email=&sfph_mail=Patch
• https://www.clear-gate.com/blog/ssrf-with-dns-rebinding-2/Technical Description
• https://www.wordfence.com/threat-intel/vulnerabilities/id/879384eb-bfea-4667-a7de-9f723dbea74b?source=cveThird Party Advisory
• https://plugins.trac.wordpress.org/browser/tablepress/trunk/classes/class-import.php#L125Patch
• https://plugins.trac.wordpress.org/browser/tablepress/trunk/classes/class-import.php#L141Patch
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3097113%40tablepress&new=3097113%40tablepress&sfp_email=&sfph_mail=Patch
• https://www.clear-gate.com/blog/ssrf-with-dns-rebinding-2/Technical Description
• https://www.wordfence.com/threat-intel/vulnerabilities/id/879384eb-bfea-4667-a7de-9f723dbea74b?source=cveThird Party Advisory

Published

Jun 7, 2024

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-43533Remote Desktop Client Remote Code Execution Vulnerability8.8
• CVE-2024-43534Windows Graphics Component Information Disclosure Vulnerabil…6.5
• CVE-2024-43535Windows Kernel-Mode Driver Elevation of Privilege Vulnerabil…7
• CVE-2024-43536Windows Mobile Broadband Driver Remote Code Execution Vulner…6.8
• CVE-2024-43537Windows Mobile Broadband Driver Denial of Service Vulnerabil…6.5
• CVE-2024-43538Windows Mobile Broadband Driver Denial of Service Vulnerabil…6.5
• CVE-2024-43540Windows Mobile Broadband Driver Denial of Service Vulnerabil…6.5
• CVE-2024-43541Microsoft Simple Certificate Enrollment Protocol Denial of S…7.5
• CVE-2024-43542Windows Mobile Broadband Driver Denial of Service Vulnerabil…6.5
• CVE-2024-43543Windows Mobile Broadband Driver Remote Code Execution Vulner…6.8
• CVE-2024-43544Microsoft Simple Certificate Enrollment Protocol Denial of S…7.5
• CVE-2024-43545Windows Online Certificate Status Protocol (OCSP) Server Den…7.5