Amazon Products to WooCommerce <= 1.2.7 - 未认证的服务器端请求伪造 (Unauthenticated Server-Side Request Forgery)

该SSRF漏洞允许攻击者利用Amazon Products to WooCommerce插件作为跳板，向内部网络发起请求。攻击者可以扫描内部服务，尝试访问敏感数据，甚至可能修改内部系统配置。由于WordPress插件通常具有较高的权限，该漏洞可能导致更广泛的系统影响。攻击者可以利用该漏洞获取内部网络拓扑信息，识别潜在的目标，并进一步进行攻击。如果内部服务存在其他漏洞，攻击者可以通过SSRF漏洞进行链式攻击，扩大攻击范围。

WordPress websites utilizing the Amazon Products to WooCommerce plugin, particularly those with internal services accessible via HTTP or HTTPS, are at risk. Shared hosting environments are especially vulnerable as they often have limited control over plugin updates and configurations. Legacy WordPress installations running older versions of PHP or with outdated security practices are also at increased risk.

• wordpress / composer / npm:

grep -r 'wcta2w_get_urls()' /var/www/html/wp-content/plugins/amazon-products-to-woocommerce/*

• generic web:

curl -I https://your-wordpress-site.com/wp-content/plugins/amazon-products-to-woocommerce/ | grep Server

• wordpress / composer / npm:

wp plugin list | grep 'amazon-products-to-woocommerce'

• wordpress / composer / npm:

wp plugin status | grep 'amazon-products-to-woocommerce'

1. 2025-07-02Disclosure

   disclosure

1. 已保留2025-06-06
2. 发布日期2025-07-02
3. 修改日期2026-04-08
4. EPSS 更新日期2026-03-23

立即升级Amazon Products to WooCommerce插件至1.2.8版本是缓解该漏洞的最佳方法。如果无法立即升级，可以考虑使用Web应用防火墙（WAF）来过滤恶意请求，阻止对内部资源的访问。此外，可以限制插件的网络访问权限，只允许访问必要的外部资源。监控插件的日志文件，查找可疑的网络请求。如果使用共享主机环境，请联系主机提供商，了解他们是否已采取措施来缓解该漏洞。