Unrated severityNVD Advisory· Published Dec 1, 2014· Updated May 6, 2026

CVE-2014-8749

Description

Server-side request forgery (SSRF) vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote attackers to trigger outbound requests that authenticate to arbitrary databases via the dbhost parameter.

Affected products

Ait Pro/Bulletproof Security
cpe:2.3:a:ait-pro:bulletproof_security:*:*:*:*:*:wordpress:*:*
Range: <=.51

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

wordpress.org/plugins/bulletproof-security/changelog/nvdPatchVendor Advisory
seclists.org/fulldisclosure/2014/Nov/13nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000