Revision history [back]
 | 1 | initial version |
The solution for the vulnerability "WP <= 6.1.1 - Unauthenticated Blind SSRF via DNS Rebinding" is to upgrade to a version of WordPress higher than 5.1.1, as this vulnerability was fixed in version 5.1.2. If you are unable to upgrade immediately, you can patch the vulnerability by adding the following code to your wp-config.php file:
define('WPHTTPBLOCK_EXTERNAL', true);
This code will prevent WordPress from making any external HTTP requests, which will prevent the vulnerability from being exploited. However, this may break some plugins or features that rely on external HTTP requests, so it is recommended to only use this as a temporary solution until the WordPress version can be upgraded.