WordPress security by component

WPGet API – Connect to any external REST API

Plugin description

WPGet API – Connect to any external REST API is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Mar 07, 2025; the highest CVE/CNA score is 5.5.

Plugin slug: wpgetapi

Latest vulnerability

CVE-2024-13857: WPGet API – Connect to any external REST API: Server-side request forgery

WPGet API – Connect to any external REST API is affected by server-side request forgery. Exploitation requires at least administrator-level access. The vulnerable server can be induced to make attacker-selected network requests.

PublishedMar 07, 2025

Safe version guidanceSee mitigation notes

		Safe version
Mar 07, 2025	CVE-2024-13857 WPGet API – Connect to any external REST API: Server-side request forgery WPGet API – Connect to any external REST API is affected by server-side request forgery. Exploitation requires at least administrator-level access. The vulnerable server can be induced to make attacker-selected network requests.	See mitigation notes	CVE5.5 NVDPending