Revision history [back]
 | 1 | initial version |
Unauthenticated Blind SSRF via DNS Rebinding vulnerability in WP version 6.1.1 and lower allows unauthenticated attackers to perform server-side request forgery (SSRF) attacks. This vulnerability occurs when an attacker can control the DNS settings of their victim's network or machine, which they can then use to redirect requests from the vulnerable application to their own server or arbitrary servers. This could potentially allow an attacker to bypass security measures and gain access to sensitive data or execute arbitrary code on the server, leading to various types of attacks such as data exfiltration or complete server takeover.