CVE-2024-4260: 
WordPress vulnerability analysis and mitigation

The Page Builder Gutenberg Blocks WordPress plugin (CoBlocks) before version 3.1.12 contains a Server-Side Request Forgery (SSRF) vulnerability. The plugin fails to prevent users from pinging arbitrary hosts via some of its shortcodes, which could allow high privilege users such as contributors to perform SSRF attacks (WPScan).

The vulnerability exists in the Events block functionality where users can input arbitrary URLs. When a URL is submitted through the 'Use URL' button, the plugin attempts to connect to that host, allowing potential internal network scanning. The CVSS 3.1 base score is 6.5 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N (CISA-ADP).

If exploited, this vulnerability could allow authenticated users with contributor-level privileges or higher to perform Server-Side Request Forgery attacks. This could potentially lead to unauthorized access to internal network resources, service enumeration, and information disclosure (WPScan).

A proof of concept exists where an attacker can create a new block, add an 'Events' block, and input URLs like 'http://127.0.0.1:XXXX/'. The response from the server can indicate whether specific ports are open or closed, facilitating internal network scanning (WPScan).

Users should update to CoBlocks version 3.1.12 or later which contains the fix for this vulnerability (WPScan).