Description
WordPress Plugin Telefication is prone to a server-side request forgery vulnerability. An attacker may leverage this issue to make the vulnerable server perform port scanning of hosts in internal or external networks; other attacks are also possible. WordPress Plugin Telefication version 1.8.0 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.8.1 or latest
References
https://www.wordfence.com/vulnerability-advisories/#CVE-2021-39339
https://plugins.svn.wordpress.org/telefication/trunk/README.txt
Related Vulnerabilities
WordPress Plugin PIKLIST-Rapid development framework Cross-Site Scripting (0.9.4.25)
WordPress 4.0.x Possible SQL Injection Vulnerability (4.0 - 4.0.19)
WordPress Plugin WP Infusionsoft WooCommerce Cross-Site Scripting (1.0.8)
WordPress Plugin Appointment Booking Calendar Multiple Vulnerabilities (1.1.7)
WordPress Plugin LiveChat-WP live chat Cross-Site Scripting (3.7.3)