CVE-2024-4354: 
WordPress vulnerability analysis and mitigation

The TablePress WordPress plugin (versions up to and including 2.3) contains a Server-Side Request Forgery (SSRF) vulnerability in the get_files_to_import() function. This vulnerability allows authenticated attackers with author-level access or higher to make web requests to arbitrary locations from the web application, potentially accessing and modifying information from internal services (NVD).

The vulnerability exists in the get_files_to_import() function of the TablePress plugin. Due to insufficient validation of URL imports, authenticated users with author-level privileges can trigger server-side requests to arbitrary locations. The issue is particularly concerning due to the complex nature of protecting against DNS rebind attacks in WordPress software. The vulnerability has been assigned a CVSS v3.1 score of 6.4 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N (Wordfence).

The vulnerability allows attackers to query and modify information from internal services by making web requests originating from the web application. This could potentially lead to unauthorized access to internal resources and data exfiltration. The attack surface is limited to authenticated users with author-level access or higher (NVD).

The vulnerability can be exploited by authenticated users with author-level access or higher. The attack can be enhanced through DNS rebinding techniques, which can bypass certain security controls. A detailed proof of concept demonstrates how attackers can use DNS rebinding to execute SSRF attacks by manipulating DNS records with low TTL values (Clear Gate).

As a solution, the developer has restricted the URL import functionality to administrators only. While this is not considered optimal, it is deemed to pose minimal risk to most site owners. Site administrators are advised to update to the latest version of the plugin. The core issue ideally needs to be addressed in WordPress core's wp_safe_remote_get() and related functions (NVD).