title: WPB Show Core <= 2.2 - Unauthenticated Server Side Request Forgery
description: The WPB Show Core WordPress plugin through 2.2 is vulnerable to server-side request forgery (SSRF) via the `path` parameter.
problem types: CWE-918 Server-Side Request Forgery (SSRF)
affected:
{
vendor: Unknown
product: wpb-show-core
versions:
status: affected, versionType: semver, version: 0, lessThanOrEqual: 2.2
defaultStatus: affected
}