Description
WordPress Plugin Telefication is prone to a server-side request forgery vulnerability. An attacker may leverage this issue to make the vulnerable server perform port scanning of hosts in internal or external networks; other attacks are also possible. WordPress Plugin Telefication version 1.8.0 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.8.1 or latest
References
https://www.wordfence.com/vulnerability-advisories/#CVE-2021-39339
https://plugins.svn.wordpress.org/telefication/trunk/README.txt
Related Vulnerabilities
WordPress Plugin WP-Spreadplugin Cross-Site Scripting (3.8.6)
WordPress Plugin Jibu Pro Cross-Site Scripting (1.7)
Perl Out-of-bounds Read Vulnerability (CVE-2018-18313)
Squid Missing Release of Resource after Effective Lifetime Vulnerability (CVE-2018-19132)
WordPress Plugin Spam protection, AntiSpam, FireWall by CleanTalk Cross-Site Scripting (5.136.3)