← All advisories

Critical severity9.1NVD Advisory· Published Jul 7, 2021· Updated Jun 17, 2026

CVE-2020-24147

CVE-2020-24147

Description

Server-side request forgery (SSR) vulnerability in the WP Smart Import (wp-smart-import) plugin 1.0.0 for WordPress via the file field.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Xylusthemes/Wp Smart Import
cpe:2.3:a:xylusthemes:wp_smart_import:1.0.0:*:*:*:*:wordpress:*:*
WordPress/wp-smart-importdescription
WordPress/Wp Smart Importllm-fuzzy
Range: =1.0.0
Package: https://wordpress.org/plugins/wp-smart-import

Patches

Vulnerability mechanics

References

2

github.com/secwx/research/blob/main/cve/CVE-2020-24147.mdnvdThird Party Advisory
wordpress.org/plugins/wp-smart-import/nvdVendor Advisory

News mentions

0

No linked articles in our index yet.