title: Craw Data <= 1.0.0 - Server Side Request Forgery
description: The Craw Data WordPress plugin through 1.0.0 does not implement nonce checks, which could allow attackers to make a logged in admin change the url value performing unwanted crawls on third-party sites (SSRF).
problem types: CWE-918 Server-Side Request Forgery (SSRF)
affected:
{
product: Craw Data
vendor: Unknown
versions:
lessThanOrEqual: 1.0.0, status: affected, version: 1.0.0, versionType: custom
}