WordPress before version 3.5.2 was vulnerable to a security issue that allowed someone to send malicious requests from an external source to an internal server. This issue is similar to one identified in 2013 as CVE-2013-0235 and is known as Server-Side Request Forgery (SSRF).