ssrf

SSRF via WordPress XML-RPC Pingback: A Recurring Finding

How we found and confirmed SSRF and brute-force amplification through a decade-old WordPress endpoint during a recent web assessment.