Description
WordPress Plugin Craw Data is prone to a server-side request forgery vulnerability. An attacker may leverage this issue to make the vulnerable server perform port scanning of hosts in internal or external networks; other attacks are also possible. WordPress Plugin Craw Data version 1.0.0 is vulnerable.
Remediation
Disable and remove the plugin until a fix is available
References
Related Vulnerabilities
WordPress Plugin Portrait-Archiv.com Photostore Cross-Site Scripting (3.1)
MySQL CVE-2021-2055 Vulnerability (CVE-2021-2055)
WordPress Plugin Google Doc Embedder Multiple Vulnerabilities (2.6.1)
WordPress Plugin Image Gallery with Slideshow Multiple Vulnerabilities (1.5.2)
WordPress Plugin WP Banners Lite Cross-Site Scripting (1.40)