SSRF
Monthly
Authenticated WordPress users holding the Zephyr Project Manager plugin's 'Custom' role or above can read arbitrary files on the underlying server by passing traversal sequences through the plugin's `file` parameter, affecting every release up to and including 3.3.203. The primary impact is confidentiality loss from file disclosure (CVSS 4.9, vector AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N), with a secondary escalation to Server-Side Request Forgery on hosts where PHP's `allow_url_fopen` directive is enabled, allowing outbound requests to attacker-chosen URLs through the same parameter. No public exploit code was identified at time of analysis and there is no confirmed active exploitation, but the elevated 'Custom' role requirement is the main limiting factor; no user interaction is needed and the read primitive is reliable once an attacker has that plugin-level access.
Server-side request forgery in CTERA Portal 8.1.x (specifically build 8.1.1417.24) allows an attacker to make the portal server issue arbitrary HTTP requests by supplying a crafted HTML file whose embedded iframe points at an attacker-chosen URL. NVD scores this 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N), while our independent assessment keeps the high confidentiality impact but raises the privilege requirement to PR:L, because a realistic attacker must first get the HTML file into a context the portal parses or renders - typically an upload or share operation that requires an authenticated/provisioned account. Impact is confidentiality-only (no integrity or availability effect), the flaw is confined to the identified 8.1.x build, no public exploit code is confirmed in the available data, and no CISA KEV listing indicates active exploitation.
PodcastGenerator 3.2.9 contains a blind server-side request forgery vulnerability that allows attackers to inject XML in the episode upload form. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Server-side request forgery in LMPixels Kerge WordPress theme 4.1.3 and earlier allows unauthenticated attackers to coerce the theme into making server-side requests to arbitrary destinations. Successful exploitation can lead to limited information disclosure or interaction with internal services. No active exploitation or public exploit code is currently known, and the EPSS probability is very low (0.05%), suggesting a low immediate risk.
Server-side request forgery in the Fancy Product Designer plugin for WordPress (all versions through 6.4.8) lets unauthenticated remote attackers make the hosting server fetch attacker-chosen internal or external URLs through the fpd_custom_uplod_file AJAX action. The flaw is a time-of-check/time-of-use race condition: the plugin validates the attacker-supplied 'url' parameter with getimagesize() and then re-fetches the same URL with file_get_contents(), so an attacker who controls the responding server can answer the validation request with a legitimate image and then switch to a redirect toward an internal address before the real fetch. Impact is bounded to SSRF on WordPress installations running the affected plugin - independent assessment confirms no code execution, no authentication bypass, and no public exploit identified at time of analysis - and the attacker must control a differential-response server and win the timing window, making this a moderate-priority (CVSS 6.5) issue rather than an emergency.
Server-side request forgery (SSRF) in Grav CMS versions prior to 1.7.49.5 allows remote authenticated attackers to make the server issue arbitrary HTTP requests, but only when page content is processed through Twig templates and the configuration permits registration of undefined PHP functions. Public exploit code exists, though EPSS is low (0.29%) and no active exploitation has been confirmed in CISA KEV. The independent assessment notes that signals conflict and should be weighed carefully, rating the vulnerability as CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N, reflecting the significant non-default prerequisites.
Kubernetes' kube-controller-manager contains a half-blind server-side request forgery that allows highly privileged users to leak information from control-plane host-network endpoints when the deprecated in-tree Portworx provisioner is used. Exploitation requires a non-default Portworx StorageClass and an authorized attacker (PR:H) who can influence provisioning parameters, with high attack complexity (AC:H) and impact limited to confidentiality (CVSS 5.8). No public exploit code or active exploitation has been identified at time of analysis.
Server-Side Request Forgery in the WordPress plugin Emplibot (AI Content Writer with Keyword Research, Infographics, and Linking) affects every version up to and including 1.0.9, where the emplibot_call_webhook_with_error() and emplibot_process_zip_data() functions accept attacker-influenced URLs and fetch them from the web server. Exploitation requires an authenticated session at Administrator level or above (CVSS vector PR:H), which sharply limits real-world value since such a user already controls the site; the assessed CVSS is 4.4 with EPSS at 0.19% (8th percentile), and there is no public exploit identified at time of analysis. An attacker who meets the privilege prerequisite could use the plugin as a proxy to query or modify internal services and cloud metadata endpoints reachable from the WordPress host.
WP Fastest Cache Premium plugin versions up to 1.7.4 contain a Server-Side Request Forgery (SSRF) vulnerability in the 'get_server_time_ajax_request' AJAX action that allows authenticated Subscriber-level users to send arbitrary web requests originating from the server, potentially enabling reconnaissance and manipulation of internal services. The free version is unaffected. No public exploit code has been identified at time of analysis, with a very low EPSS score of 0.04% indicating minimal real-world exploitation likelihood despite the authenticated attack vector.
Server-side request forgery in PowerJob up to version 5.1.2 allows authenticated remote attackers to manipulate the targetIp and targetPort arguments in the checkConnectivity function of the Network Request Handler component, enabling SSRF attacks with low confidentiality, integrity, and availability impact. Publicly available exploit code exists; however, the EPSS score of 0.03% indicates minimal real-world exploitation probability despite the public exploit availability, suggesting this vulnerability has seen limited active abuse.
Server-side request forgery in Yalantis uCrop 2.2.11 allows authenticated remote attackers to manipulate the downloadFile function in BitmapLoadTask.java URL handler, enabling arbitrary HTTP requests from the affected server. The vulnerability requires user authentication (PR:L) and carries limited confidentiality and integrity impact. Public exploit code exists, though the vendor has not responded to early disclosure attempts.
Blind server-side request forgery in the WordPress plugin 'RSS Aggregator by Feedzy - Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator' affects all versions up to and including 5.1.1 and allows unauthenticated remote attackers to make the WordPress site issue HTTP requests to arbitrary destinations through the feedzy_lazy_load function (CWE-918, CVSS 3.1 5.8, AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N). Because the SSRF is blind, the attacker cannot read responses directly, so real-world confidentiality impact depends on inference, timing side channels, or hitting internal endpoints that change state; the scope-changed metric reflects that successful requests cross a trust boundary from the public site into internal networks or cloud metadata services. No public exploit code has been identified at time of analysis and exploitation is not confirmed actively exploited (no CISA KEV listing); EPSS is 0.26% (16th percentile), indicating low near-term exploitation probability, though the low attack complexity and lack of authentication or user interaction make the code path trivially reachable on any internet-exposed installation.
Unauthenticated server-side request forgery in the ZITADEL Login UI (V2) lets a remote attacker coerce the server into issuing HTTP requests to arbitrary hosts - including internal, non-routable addresses - and read the upstream responses back, turning the identity server into a data-exfiltration and network-segmentation-bypass primitive. All deployments running the V2 Login UI on versions 4.0.0-rc.1 through 4.7.0 are affected, including self-hosted single-instance installations, because the service-URL resolution logic falls back to the attacker-supplied x-zitadel-forward-host header by default; no authentication or user interaction is required (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N, base 8.6). Exploitation is not confirmed as active - the CVE is not in CISA KEV and no public exploit code has been identified - and EPSS is low at 0.44% (37th percentile), though the impact is high enough that patching to 4.7.1 or later, or stripping the header at a fronting proxy, should be treated as a priority rather than an emergency.
Server-Side Request Forgery in ThemesInflow Hercules Core plugin for WordPress allows authenticated, low-privilege attackers to forge server-side requests. Exploitation is complex and yields only limited confidentiality and integrity impact on internal services. No public exploit or active exploitation has been reported.
Server-side request forgery (SSRF) in IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 allows an authenticated attacker with low privileges to send unauthorized requests from the server, potentially leading to network enumeration or facilitating other attacks. This moderate-severity issue (CVSS 4.3) is low-priority in practice because it requires valid credentials and only impacts confidentiality. No public exploit code or active exploitation has been identified, and EPSS is 0.07% (22nd percentile).
Server-Side Request Forgery (SSRF) vulnerability in Infinera MTC-9 version allows remote unauthenticated users to gain access to other network resources using HTTPS requests through the appliance used as a bridge.
Server-side request forgery in Yuxi-Know versions up to 0.4.0 allows high-privileged authenticated attackers to manipulate the health_url parameter in the OtherEmbedding.aencode function, causing the server to make unauthorized requests to internal or external services. The vendor has confirmed the vulnerability and disabled URL parsing as a mitigation. Public exploit code exists but no active exploitation has been reported.
Server-Side Request Forgery (SSRF) vulnerability in Apache HTTP Server on Windows with AllowEncodedSlashes On and MergeSlashes Off allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2.4.66, which fixes the issue.
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.37, a Server-Side Request Forgery (SSRF) vulnerability in Open WebUI allows any authenticated user to force the server to make HTTP requests to arbitrary URLs. This can be exploited to access cloud metadata endpoints (AWS/GCP/Azure), scan internal networks, access internal services behind firewalls, and exfiltrate sensitive information. No special permissions beyond basic authentication are required. This vulnerability is fixed in 0.6.37.
Server-side request forgery in dayrui XunRuiCMS up to 4.7.1 allows authenticated administrators to force the server to make arbitrary network requests via the ‘v’ parameter in the Project Domain Change Test API endpoint. Exploit code is publicly available, but exploitation requires high privileges, significantly limiting real-world risk.
Server-side request forgery in XunRuiCMS up to 4.7.1 allows authenticated high-privilege attackers to make arbitrary server-side requests via the Email Setting Handler. A publicly available proof-of-concept exists, but exploitation requires administrative access to the CMS admin panel. No active exploitation has been confirmed and EPSS indicates a very low likelihood of widespread exploitation.
In Splunk Enterprise versions below 10.0.1, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.4, 10.0.2503.7, and 9.3.2411.116, a user who holds a role that contains the high privilege capability `change_authentication` could enumerate internal IP addresses and network ports when adding new search peers to a Splunk search head in a distributed environment.
Blind Server-Side Request Forgery in ObjectPlanet Opinio 7.26 (rev12562) enables an authenticated high-privilege user to coerce the survey server into issuing outbound HTTP GET requests to arbitrary internal or external destinations via crafted survey-import payloads. Because the SSRF is blind, the attacker receives no response body, constraining practical impact to internal network probing and side-effect triggering on reachable internal endpoints. EPSS is 0.05% at the 15th percentile, no KEV listing exists, and no public exploit code has been identified.
Portkey.ai Gateway is a blazing fast AI Gateway with integrated guardrails. Prior to 1.14.0, the gateway determined the destination baseURL by prioritizing the value in the x-portkey-custom-host request header. The proxy route then appends the client-specified path to perform an external fetch. This can be maliciously used by users for SSRF attacks. This vulnerability is fixed in 1.14.0.
PublicCMS V5.202506.b is vulnerable to SSRF. in the chat interface of SimpleAiAdminController.
Arbitrary file read in Zabbix Frontend 7.4.0 through 7.4.2 allows an authenticated Super Admin to exploit the oauth.authorize action to read files from the web server, resulting in confidentiality loss. The requirement for the highest-privilege role makes this primarily an insider-abuse or post-compromise vulnerability, not an external attack vector. EPSS is very low (0.03%) and no public exploit has been identified; the vendor has released patches.
Server-side request forgery in Mogu Blog v2 up to version 5.2 allows remote, unauthenticated attackers to force the server to issue arbitrary HTTP requests via the uploadPictureByUrl function in the /file/uploadPicsByUrl endpoint. Publicly available exploit code
Server-side request forgery in orion-ops allows authenticated remote attackers to manipulate SSH connection parameters (host, port, credentials) to trigger outbound requests from the server, potentially reaching internal services. The vulnerability affects all versions up to commit 5925824 and has a publicly available proof-of-concept exploit. Exploitation requires low-privilege access and may impact confidentiality, integrity, and availability of internal assets.
Server-side request forgery in deco-cx apps 0.120.1 and earlier allows a low-privileged remote attacker to manipulate the `url` parameter in the AnalyticsScript loader, forcing the server to fetch arbitrary URLs. This can result in low-impact information disclosure, internal network reconnaissance, or interaction with internal services. A public exploit exists, but there is no evidence of active exploitation (EPSS 0.05%); upgrading to version 0.120.2 removes the vulnerable parameter.
A vulnerability was found in ZenTao up to 21.7.6-8564. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
LibreChat is a ChatGPT clone with additional features. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
The AI ChatBot with ChatGPT and Content Generator by AYS plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.7.0 via the. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
NVIDIA NeMo Agent Toolkit UI for Web contains a vulnerability in the chat API endpoint where an attacker may cause a Server-Side Request Forgery. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A vulnerability was found in lKinderBueno Streamity Xtream IPTV Player up to 2.8. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
The WP Shortcodes Plugin - Shortcodes Ultimate plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 7.4.5 via the su_shortcode_csv_table function. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Azure Monitor Elevation of Privilege Vulnerability. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Server-Side Request Forgery (SSRF) vulnerability in Progress MOVEit Transfer.1.8, from 2025.0.0 before 2025.0.4. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
The Responsive Lightbox & Gallery plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.5.3 via the 'get_image_size_by_url' function. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Local Agent DVR versions thru 6.6.1.0 are vulnerable to directory traversal that allows an unauthenticated local attacker to gain access to sensitive information, cause a server-side forgery request. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.
The AI Engine plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.1.8 via the rest_helpers_create_images function. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
The Icon List Block - Add Icon-Based Lists with Custom Styles plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.2.1 via the fs_api_request. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
The WP Migrate Lite - WordPress Migration Made Easy plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.7.6 via the wpmdb_flush AJAX. Rated medium severity (CVSS 5.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
The Local Syndication plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.5a via the `url` parameter in the `[syndicate_local]` shortcode. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
PDFPatcher thru 1.1.3.4663 executable's XML bookmark import functionality does not restrict XML external entity (XXE) references. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A weakness has been identified in rachelos WeRSS we-mp-rss up to 1.4.7. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A Server-side Request Forgery vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Probing of internal infrastructure. Rated low severity (CVSS 3.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
grist-core is a spreadsheet hosting server. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
Typebot is an open-source chatbot builder. Rated critical severity (CVSS 9.6), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Astro is a web framework. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Server-side request forgery in MaxKB (open-source AI assistant from 1Panel-dev) allows an authenticated user with permission to author or edit tools in the Python tool module to escape the intended network isolation of the code-execution sandbox and reach internal network services such as databases. All versions prior to 2.3.1 are affected; the vendor fixed the issue in 2.3.1. Exploitation requires a valid MaxKB account with tool-authoring privileges (PR:L per the assessed vector), and the realistic impact depends on which internal services are network-reachable from the MaxKB host. EPSS is low (0.08%, 23rd percentile) and no public exploit code has been identified at time of analysis.
Lichess lila before commit 11b4c0fb00f0ffd823246f839627005459c8f05c (2025-06-02) contains a Server-Side Request Forgery (SSRF) vulnerability in the game export API. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
If an attacker causes kdcproxy to connect to an attacker-controlled KDC server (e.g. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
If kdcproxy receives a request for a realm which does not have server addresses defined in its configuration, by default, it will query SRV records in the DNS zone matching the requested realm name. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Origin Validation Error in Kibana can lead to Server-Side Request Forgery via a forged Origin HTTP header processed by the Observability AI Assistant. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A local server-side request forgery (SSRF) security issue exists within Studio 5000® Simulation Interface™ via the API. Rated high severity (CVSS 8.9), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Soft Serve is a self-hostable Git server for the command line. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Jellysweep is a cleanup tool for the Jellyfin media server. Rated high severity (CVSS 8.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
ThinkDashboard is a self-hosted bookmark dashboard built with Go and vanilla JavaScript. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
A Server-Side Request Forgery (SSRF) vulnerability, achievable through an XML External Entity (XXE) injection, exists in MetInfo Content Management System (CMS) thru 8.1. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A Server-Side Request Forgery (SSRF) in the /api/proxy/ component of linshenkx prompt-optimizer v1.3.0 to v1.4.2 allows attackers to scan internal resources via a crafted request. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 8.6.0 via the getFullContent() function. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
DataEase is an open source data visualization analysis tool. Rated high severity (CVSS 8.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
The B Carousel Block - Responsive Image and Content Carousel plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 1.1.5. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.8.11 via the wpematico_test_feed() function. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
LinkAce is a self-hosted archive to collect website links. Rated low severity (CVSS 2.3), this vulnerability is remotely exploitable. Public exploit code available.
Unauthenticated SSRF in Halo CMS 2.21 exposes internal network infrastructure to remote attackers via the Thumbnail via-uri endpoint, which performs server-side HTTP GET requests to attacker-supplied URLs without allowlist or blocklist enforcement. Beyond initiating outbound connections to attacker-controlled hosts, the endpoint issues a 307 redirect that leaks internal URLs in the Location header, enabling internal network reconnaissance. EPSS is low (0.27%, 19th percentile) with no CISA KEV listing, but a public researcher disclosure document exists, lowering the barrier to exploitation.
Missing permission checks in Jenkins Start Windocks Containers Plugin 1.4 and earlier let any authenticated user holding the baseline Overall/Read permission force the Jenkins controller to make an outbound HTTP connection to a URL of the attacker's choosing, a classic server-side request forgery (SSRF) pattern with integrity-only impact. Only Jenkins instances with the plugin installed are affected; the Jenkins core itself is not vulnerable, and exploitation requires a valid account with at least read-level access, so anonymous or unauthenticated attacks are not indicated by the assessed vector (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N, score 4.3). Severity signals are mutually consistent and point to a genuine-but-low-priority issue: EPSS is just 0.25% (15th percentile), no public exploit code has been identified at time of analysis, and there is no CISA KEV listing indicating active exploitation.
Server-side request forgery in Astro's built-in image proxy lets unauthenticated remote attackers force the server to fetch arbitrary external URLs by placing backslash-prefixed values (\, \\, or URL-encoded %5C) in the href parameter of the /_image endpoint, bypassing the domain validation added for CVE-2025-58179. The flaw affects Astro versions 5.13.4 through 5.13.9 on Node.js and carries secondary XSS potential because the proxied response - for example an attacker-hosted SVG - is subsequently rendered in a victim's browser context; it is rated CVSS 7.2 (AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) and maps to CWE-79 in the NVD record despite the underlying weakness being an SSRF/URL-validation bypass. Publicly available exploit code exists (the GHSA proof of concept targets Astro's own hosted image endpoint), while EPSS remains low at 0.35% (27th percentile) and the practical attack surface is limited to deployments running the on-demand image service rather than purely static builds. A vendor-released patch is available: Astro 5.13.10.
Server-side request forgery in IBM Concert 1.0.0 through 2.0.0 allows an authenticated user who can reach a URL-fetching feature to make the server issue requests to attacker-chosen destinations, enabling internal network enumeration and access to services or cloud metadata endpoints reachable from the Concert host's network position. The flaw (CWE-918, CVSS 5.4, vector AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) requires a valid low-privileged account and no user interaction, and its impact is bounded by what the server itself can reach. No public exploit code has been identified at time of analysis and EPSS is only 0.16% (5th percentile), so this is not a confirmed-actively-exploited issue and represents low real-world priority.
Server-Side Request Forgery in the Codeless Slider Templates WordPress plugin (versions ≤1.0.3) enables authenticated low-privilege users to induce the server to make arbitrary outbound HTTP requests, potentially reaching internal network resources such as cloud metadata services or private APIs. The CVSS vector (AV:N/AC:H/PR:L/S:C/C:L/I:L) confirms network exploitation requires an authenticated WordPress account and high attack complexity, with scope change indicating cross-boundary impact on internal infrastructure. No active exploitation is confirmed - EPSS sits at 0.03% (10th percentile) and no KEV listing exists - placing this firmly in the low real-world priority tier despite the scope change.
Unauthenticated server-side request forgery in the WordPress plugin Popup Builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers (popup-builder-block) affects all versions up to and including 2.1.4 and lets any remote client that can reach an affected site force the web server to issue HTTP requests to arbitrary destinations. Because the CVSS vector is PR:N/UI:N, no authentication, user interaction, or non-default configuration is required - the plugin merely has to be installed and active with its demo-fetch route reachable - and the highest-rated impact is confidentiality (C:H) via querying internal services, cloud metadata endpoints, or other hosts on the server's network, with secondary use for network reconnaissance and, per the description, potential modification of internal service state. Exploitation signals are limited: no public exploit code was identified at time of analysis, CISA KEV does not list this CVE, and EPSS is low at roughly 0.38% (30th percentile), so this is a credible-but-not-urgent priority rather than an active incident. Note that version 2.1.4 is only a partial patch, so simply moving to 2.1.4 may not fully eliminate the condition.
Server-side request forgery (SSRF) in the Real Cookie Banner WordPress plugin versions up to and including 5.2.4 allows authenticated attackers with administrator-level access to make arbitrary web requests from the server via the 'url' parameter in the '/scanner/scan-without-login' REST API endpoint, potentially querying and modifying information from internal services. The vulnerability requires high privileges (PR:H) and has a moderate CVSS score of 6.8 (NVD) with an EPSS of 0.39%, indicating a low likelihood of exploitation. No public exploit code or active exploitation has been identified at the time of analysis.
Server-side request forgery (SSRF) in the Orbit Fox WordPress plugin before 3.0.2 allows authenticated users to force the server to fetch arbitrary URLs via the stock photo import feature, leading to limited confidentiality and integrity impact (CVSS 5.5, Medium). The assessed vector requires low privileges (PR:L), though the vendor originally rated it high (PR:H); no public exploit has been identified, and EPSS is 0.19% (8th percentile), indicating low real-world risk. The flaw does not itself grant code execution or full data disclosure, but it can be used to probe internal networks or access internal services.
Server-side request forgery in Microsoft's cloud-hosted Azure Compute Gallery allows unauthenticated remote attackers to coerce the Azure Compute Resource Provider into issuing attacker-influenced requests, ultimately elevating privileges within the service. Per the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base 9.8), exploitation is network-reachable, low complexity, requires no authentication and no user interaction, and yields high confidentiality and integrity impact; the scope is unchanged. There is confirmed no public exploit code and no CISA KEV listing at time of analysis - no public exploit identified at time of analysis - and the EPSS score is modest at 0.77% (54th percentile), reflecting that the primary constraint is operational: the target is a Microsoft-operated multi-tenant service remediated centrally by Microsoft, not by customer patch deployment.
Server-side request forgery in the Feedzy RSS Aggregator plugin for WordPress (all versions up to and including 5.1.0) allows an authenticated attacker with Subscriber-level access or above to point the plugin's feed-sanitization routine at arbitrary URLs, causing the web server to fetch internal-only hosts, intranet services, or cloud metadata endpoints on their behalf. The flaw is remote and requires no user interaction, and it carries a scope change because the vulnerable application is used as a proxy into other systems, but the consequence is confidentiality-only - reading responses from reachable internal targets - with no integrity or availability effect. No public exploit code has been identified at time of analysis and EPSS is 0.29% (20th percentile), so opportunistic mass exploitation is unlikely; the practical barrier is that an attacker must first obtain a low-privilege account, which sites with open self-registration effectively hand out.
Blind server-side request forgery in the MxChat - AI Chatbot for WordPress plugin (mxchat-basic) up to and including version 2.4.6 lets remote attackers coerce the WordPress server into making HTTP requests to arbitrary destinations through the unauthenticated mxchat_handle_chat_request AJAX action, which passes user-supplied URLs into the plugin's PDF processing routine without adequate validation. Because the CVSS vector is AV:N/AC:L/PR:N/UI:N, no credentials or victim interaction are required, but impact is confined to confidentiality (C:L) with no integrity or availability effect, and the blind nature of the flaw means the attacker never sees the fetched response - real-world risk therefore hinges on whether the host can reach sensitive internal services or a cloud metadata endpoint. No public exploit code was identified at time of analysis and CISA KEV does not list this CVE; EPSS is only 0.29% (20th percentile), consistent with a moderate-severity, low-priority issue that should not jump the patch queue despite being remotely and unauthenticatedly reachable.
Server-side request forgery (SSRF) in FastGPT versions prior to 4.11.1 allows an attacker who can control the URL passed to the workflow file-reading node to force the server to make arbitrary network requests, potentially reaching internal services or cloud metadata endpoints. Exploitation generally requires access to the workflow builder, which is typically behind authentication depending on deployment; no public exploit code has been identified at time of analysis (EPSS 0.24%). The issue is patched in version 4.11.1.
Server-side request forgery in Icegram Express Pro (email-subscribers-premium) versions up to 5.9.5 allows an authenticated attacker with high privileges to force the WordPress plugin to perform server-side HTTP requests to arbitrary destinations. High attack complexity (AC:H) and high privileges (PR:H) limit exploitability, and the EPSS score is 0.21% (10th percentile); no public exploit identified at time of analysis. The CVSS 3.1 vector (AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) indicates low confidentiality and integrity impact confined to scope change, making this a low-to-moderate priority issue.
Server-Side Request Forgery in the Captcha.eu WordPress plugin (versions ≤ 1.0.61) allows unauthenticated remote attackers to make the server issue requests to internal or external services. This can lead to information disclosure or limited interaction with other systems, though high attack complexity reduces exploitability. No active exploitation or public exploit code is known, and EPSS indicates a very low probability of real-world attacks.
Server-side request forgery in Zimbra Collaboration Suite (ZCS) before 10.1.12 lets an authenticated user who can reach the chat feature abuse the misconfigured chat proxy to make the Zimbra server issue requests to internal or otherwise unreachable network services. The vulnerability carries a CVSS of 5.0 (AV:N/AC:L/PR:L/UI:N/S:C) and is rated low by threat intelligence signals - EPSS is only 0.26% (16th percentile) and there is no public exploit identified at time of analysis - because the attacker must already hold valid credentials and the chat proxy must be configured and reachable. Exploitation requires no victim interaction, but real-world impact is bounded by which internal services the Zimbra host can reach; our independent assessment rates the confidentiality impact as low (C:L/I:N) rather than the integrity impact NVD records.
Blind server-side request forgery in the Element Pack Addons for Elementor WordPress plugin (all versions up to and including 8.2.5) allows an authenticated user with Subscriber-level access or above to force the web server to issue HTTP requests to arbitrary internal destinations through the wp_ajax_import_elementor_template AJAX action. Because Subscriber is the lowest standard WordPress role, the exposure widens sharply on any site that permits open self-registration, where any visitor can obtain the necessary account. The request is blind (no response body is returned to the attacker), so impact is constrained to inference-based reconnaissance, internal port/service probing, and potential modification of internal services; CVSS 3.1 scores it 5.0 (AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N), reflecting the cross-boundary scope change but limited confidentiality-only effect. EPSS is low at 0.24% (14th percentile), the issue is not listed in CISA KEV, and no public exploit code was identified at time of analysis, making this a moderate-priority, patch-when-convenient finding rather than an emergency.
Server-Side Request Forgery in Gutenberg Essential Blocks plugin for WordPress allows authenticated attackers with Author-level or higher privileges to make arbitrary web requests originating from the vulnerable server via the eb_save_ai_generated_image function, enabling reconnaissance and manipulation of internal services. Affects all versions up to 5.7.1 with CVSS 6.4 severity; no active KEV status or public exploit code confirmed at time of analysis.
Server-side request forgery in LobeChat 1.136.1 and earlier lets an authenticated user drive the server's own network position by calling the tools.search.crawlPages tRPC endpoint with an arbitrary urls array and impls set to ["naive"], causing the naive web-crawler implementation to fetch attacker-chosen URLs - including localhost, private ranges, and the cloud metadata address 169.254.169.254 - without any internal-address validation. In production this requires a valid user token (the CVSS vectors agree on an authenticated prerequisite, though NVD rates it PR:H and our assessment PR:L); the development-mode-only lobe-auth-dev-backend-api:1 header bypass is what the published proof-of-concept uses to read an internal API at localhost:8889, so publicly available exploit code exists. Impact is bounded to read-only information disclosure from reachable internal HTTP services, EPSS is low at 0.32% (23rd percentile), there is no CISA KEV entry, and the vendor shipped a fix in version 1.136.2.
SVG-based server-side request forgery in ThingsBoard versions prior to 4.2.1 allows upload of crafted SVG files containing external URL references to the dashboard Image Upload Gallery, causing the platform to initiate unintended outbound HTTP requests toward internal network resources. All ThingsBoard deployments (community, professional edition) running versions before 4.2.1 are affected via this gallery feature. No public exploit code or CISA KEV listing exists at time of analysis; however, the upstream fix in PR #13927 - which adds a Content-Security-Policy response header rather than sanitizing SVG content at upload - indicates the primary exploitation path may be browser-mediated rather than purely server-side, warranting scrutiny of the PR:N (no privileges required) CVSS assignment.
Server-side request forgery in NucleoidAI Nucleoid 0.7.10 and earlier lets unauthenticated remote attackers steer outbound requests issued by the runtime: when the Outbound Request Handler path (extension.apply in /src/cluster.ts) is exercised with externally influenced https/ip/port/path/headers arguments, the attacker controls the destination the server connects to. Per the assessed vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) no authentication or user interaction is required and complexity is low, but impact is constrained to LOW confidentiality, integrity and availability for the Nucleoid host itself, with no scope change - real damage depends on what internal services, metadata endpoints, or flat internal networks the host can reach. No confirmed actively exploited in CISA KEV, no public exploit identified at time of analysis, and EPSS is low at 0.46% (38th percentile), so this is a moderate, not urgent, priority, further limited by Nucleoid being a niche runtime with relatively few internet-exposed deployments that also pass remote input into this code path.
Server-side request forgery in Angular's @angular/ssr package (all versions from 19.0.0-next.0 before 19.2.18, 20.0.0-next.0 before 20.3.6, and 21.0.0-next.0 before 21.0.0-next.8) lets a remote unauthenticated attacker redirect server-side relative HTTP requests to an arbitrary external host by submitting a request path beginning with a double forward slash (//) or backslash. The flaw lives in the createRequestUrl helper, where the native URL constructor interprets a leading '//' as a scheme-relative URL and silently replaces the trusted base host with an attacker-controlled hostname, so the page's virtual location (exposed via DOCUMENT/PlatformLocation) and any subsequent relative fetch such as HttpClient.get('assets/data.json') resolve against the attacker's domain. Exploitation is conditional: the SSR application must actually perform relative server-side fetches during rendering, and the request path must reach createRequestUrl without being normalized by an upstream proxy; no public exploit code has been identified and EPSS is low at 0.43% (35th percentile), though the flaw is remotely reachable and unauthenticated per the assessed vector (PR:N/UI:N).
Server-side request forgery in the WordPress Task Scheduler plugin (all versions up to and including 1.6.3) allows an authenticated Administrator-level user to make the WordPress server send arbitrary HTTP requests through the plugin's 'Check Website' task, potentially querying or modifying internal services that are not externally reachable. This is a low-priority issue despite being network-reachable: successful exploitation requires high privileges (PR:H), the value depends on reachable internal network targets, EPSS is 0.24% (14th percentile), and no public exploit identified at time of analysis.
Server-side request forgery in the Pz-LinkCard WordPress plugin before version 2.5.7 allows a user with as little as Contributor privileges to make the site's server send HTTP requests to an attacker-influenced destination, because a request parameter is used to build an outbound request without validation. The independent assessment rates this as low severity (CVSS 3.1 base 3.8, AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N), and the EPSS score of 0.19% (8th percentile) reinforces that real-world exploitation is unlikely; no exploit code and no CISA KEV entry have been identified at time of analysis. Risk is concentrated on sites that leave the plugin active and allow open or low-privilege registration, since a valid Contributor account is a prerequisite.
Authenticated WordPress users holding the Zephyr Project Manager plugin's 'Custom' role or above can read arbitrary files on the underlying server by passing traversal sequences through the plugin's `file` parameter, affecting every release up to and including 3.3.203. The primary impact is confidentiality loss from file disclosure (CVSS 4.9, vector AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N), with a secondary escalation to Server-Side Request Forgery on hosts where PHP's `allow_url_fopen` directive is enabled, allowing outbound requests to attacker-chosen URLs through the same parameter. No public exploit code was identified at time of analysis and there is no confirmed active exploitation, but the elevated 'Custom' role requirement is the main limiting factor; no user interaction is needed and the read primitive is reliable once an attacker has that plugin-level access.
Server-side request forgery in CTERA Portal 8.1.x (specifically build 8.1.1417.24) allows an attacker to make the portal server issue arbitrary HTTP requests by supplying a crafted HTML file whose embedded iframe points at an attacker-chosen URL. NVD scores this 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N), while our independent assessment keeps the high confidentiality impact but raises the privilege requirement to PR:L, because a realistic attacker must first get the HTML file into a context the portal parses or renders - typically an upload or share operation that requires an authenticated/provisioned account. Impact is confidentiality-only (no integrity or availability effect), the flaw is confined to the identified 8.1.x build, no public exploit code is confirmed in the available data, and no CISA KEV listing indicates active exploitation.
PodcastGenerator 3.2.9 contains a blind server-side request forgery vulnerability that allows attackers to inject XML in the episode upload form. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Server-side request forgery in LMPixels Kerge WordPress theme 4.1.3 and earlier allows unauthenticated attackers to coerce the theme into making server-side requests to arbitrary destinations. Successful exploitation can lead to limited information disclosure or interaction with internal services. No active exploitation or public exploit code is currently known, and the EPSS probability is very low (0.05%), suggesting a low immediate risk.
Server-side request forgery in the Fancy Product Designer plugin for WordPress (all versions through 6.4.8) lets unauthenticated remote attackers make the hosting server fetch attacker-chosen internal or external URLs through the fpd_custom_uplod_file AJAX action. The flaw is a time-of-check/time-of-use race condition: the plugin validates the attacker-supplied 'url' parameter with getimagesize() and then re-fetches the same URL with file_get_contents(), so an attacker who controls the responding server can answer the validation request with a legitimate image and then switch to a redirect toward an internal address before the real fetch. Impact is bounded to SSRF on WordPress installations running the affected plugin - independent assessment confirms no code execution, no authentication bypass, and no public exploit identified at time of analysis - and the attacker must control a differential-response server and win the timing window, making this a moderate-priority (CVSS 6.5) issue rather than an emergency.
Server-side request forgery (SSRF) in Grav CMS versions prior to 1.7.49.5 allows remote authenticated attackers to make the server issue arbitrary HTTP requests, but only when page content is processed through Twig templates and the configuration permits registration of undefined PHP functions. Public exploit code exists, though EPSS is low (0.29%) and no active exploitation has been confirmed in CISA KEV. The independent assessment notes that signals conflict and should be weighed carefully, rating the vulnerability as CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N, reflecting the significant non-default prerequisites.
Kubernetes' kube-controller-manager contains a half-blind server-side request forgery that allows highly privileged users to leak information from control-plane host-network endpoints when the deprecated in-tree Portworx provisioner is used. Exploitation requires a non-default Portworx StorageClass and an authorized attacker (PR:H) who can influence provisioning parameters, with high attack complexity (AC:H) and impact limited to confidentiality (CVSS 5.8). No public exploit code or active exploitation has been identified at time of analysis.
Server-Side Request Forgery in the WordPress plugin Emplibot (AI Content Writer with Keyword Research, Infographics, and Linking) affects every version up to and including 1.0.9, where the emplibot_call_webhook_with_error() and emplibot_process_zip_data() functions accept attacker-influenced URLs and fetch them from the web server. Exploitation requires an authenticated session at Administrator level or above (CVSS vector PR:H), which sharply limits real-world value since such a user already controls the site; the assessed CVSS is 4.4 with EPSS at 0.19% (8th percentile), and there is no public exploit identified at time of analysis. An attacker who meets the privilege prerequisite could use the plugin as a proxy to query or modify internal services and cloud metadata endpoints reachable from the WordPress host.
WP Fastest Cache Premium plugin versions up to 1.7.4 contain a Server-Side Request Forgery (SSRF) vulnerability in the 'get_server_time_ajax_request' AJAX action that allows authenticated Subscriber-level users to send arbitrary web requests originating from the server, potentially enabling reconnaissance and manipulation of internal services. The free version is unaffected. No public exploit code has been identified at time of analysis, with a very low EPSS score of 0.04% indicating minimal real-world exploitation likelihood despite the authenticated attack vector.
Server-side request forgery in PowerJob up to version 5.1.2 allows authenticated remote attackers to manipulate the targetIp and targetPort arguments in the checkConnectivity function of the Network Request Handler component, enabling SSRF attacks with low confidentiality, integrity, and availability impact. Publicly available exploit code exists; however, the EPSS score of 0.03% indicates minimal real-world exploitation probability despite the public exploit availability, suggesting this vulnerability has seen limited active abuse.
Server-side request forgery in Yalantis uCrop 2.2.11 allows authenticated remote attackers to manipulate the downloadFile function in BitmapLoadTask.java URL handler, enabling arbitrary HTTP requests from the affected server. The vulnerability requires user authentication (PR:L) and carries limited confidentiality and integrity impact. Public exploit code exists, though the vendor has not responded to early disclosure attempts.
Blind server-side request forgery in the WordPress plugin 'RSS Aggregator by Feedzy - Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator' affects all versions up to and including 5.1.1 and allows unauthenticated remote attackers to make the WordPress site issue HTTP requests to arbitrary destinations through the feedzy_lazy_load function (CWE-918, CVSS 3.1 5.8, AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N). Because the SSRF is blind, the attacker cannot read responses directly, so real-world confidentiality impact depends on inference, timing side channels, or hitting internal endpoints that change state; the scope-changed metric reflects that successful requests cross a trust boundary from the public site into internal networks or cloud metadata services. No public exploit code has been identified at time of analysis and exploitation is not confirmed actively exploited (no CISA KEV listing); EPSS is 0.26% (16th percentile), indicating low near-term exploitation probability, though the low attack complexity and lack of authentication or user interaction make the code path trivially reachable on any internet-exposed installation.
Unauthenticated server-side request forgery in the ZITADEL Login UI (V2) lets a remote attacker coerce the server into issuing HTTP requests to arbitrary hosts - including internal, non-routable addresses - and read the upstream responses back, turning the identity server into a data-exfiltration and network-segmentation-bypass primitive. All deployments running the V2 Login UI on versions 4.0.0-rc.1 through 4.7.0 are affected, including self-hosted single-instance installations, because the service-URL resolution logic falls back to the attacker-supplied x-zitadel-forward-host header by default; no authentication or user interaction is required (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N, base 8.6). Exploitation is not confirmed as active - the CVE is not in CISA KEV and no public exploit code has been identified - and EPSS is low at 0.44% (37th percentile), though the impact is high enough that patching to 4.7.1 or later, or stripping the header at a fronting proxy, should be treated as a priority rather than an emergency.
Server-Side Request Forgery in ThemesInflow Hercules Core plugin for WordPress allows authenticated, low-privilege attackers to forge server-side requests. Exploitation is complex and yields only limited confidentiality and integrity impact on internal services. No public exploit or active exploitation has been reported.
Server-side request forgery (SSRF) in IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 allows an authenticated attacker with low privileges to send unauthorized requests from the server, potentially leading to network enumeration or facilitating other attacks. This moderate-severity issue (CVSS 4.3) is low-priority in practice because it requires valid credentials and only impacts confidentiality. No public exploit code or active exploitation has been identified, and EPSS is 0.07% (22nd percentile).
Server-Side Request Forgery (SSRF) vulnerability in Infinera MTC-9 version allows remote unauthenticated users to gain access to other network resources using HTTPS requests through the appliance used as a bridge.
Server-side request forgery in Yuxi-Know versions up to 0.4.0 allows high-privileged authenticated attackers to manipulate the health_url parameter in the OtherEmbedding.aencode function, causing the server to make unauthorized requests to internal or external services. The vendor has confirmed the vulnerability and disabled URL parsing as a mitigation. Public exploit code exists but no active exploitation has been reported.
Server-Side Request Forgery (SSRF) vulnerability in Apache HTTP Server on Windows with AllowEncodedSlashes On and MergeSlashes Off allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2.4.66, which fixes the issue.
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.37, a Server-Side Request Forgery (SSRF) vulnerability in Open WebUI allows any authenticated user to force the server to make HTTP requests to arbitrary URLs. This can be exploited to access cloud metadata endpoints (AWS/GCP/Azure), scan internal networks, access internal services behind firewalls, and exfiltrate sensitive information. No special permissions beyond basic authentication are required. This vulnerability is fixed in 0.6.37.
Server-side request forgery in dayrui XunRuiCMS up to 4.7.1 allows authenticated administrators to force the server to make arbitrary network requests via the ‘v’ parameter in the Project Domain Change Test API endpoint. Exploit code is publicly available, but exploitation requires high privileges, significantly limiting real-world risk.
Server-side request forgery in XunRuiCMS up to 4.7.1 allows authenticated high-privilege attackers to make arbitrary server-side requests via the Email Setting Handler. A publicly available proof-of-concept exists, but exploitation requires administrative access to the CMS admin panel. No active exploitation has been confirmed and EPSS indicates a very low likelihood of widespread exploitation.
In Splunk Enterprise versions below 10.0.1, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.4, 10.0.2503.7, and 9.3.2411.116, a user who holds a role that contains the high privilege capability `change_authentication` could enumerate internal IP addresses and network ports when adding new search peers to a Splunk search head in a distributed environment.
Blind Server-Side Request Forgery in ObjectPlanet Opinio 7.26 (rev12562) enables an authenticated high-privilege user to coerce the survey server into issuing outbound HTTP GET requests to arbitrary internal or external destinations via crafted survey-import payloads. Because the SSRF is blind, the attacker receives no response body, constraining practical impact to internal network probing and side-effect triggering on reachable internal endpoints. EPSS is 0.05% at the 15th percentile, no KEV listing exists, and no public exploit code has been identified.
Portkey.ai Gateway is a blazing fast AI Gateway with integrated guardrails. Prior to 1.14.0, the gateway determined the destination baseURL by prioritizing the value in the x-portkey-custom-host request header. The proxy route then appends the client-specified path to perform an external fetch. This can be maliciously used by users for SSRF attacks. This vulnerability is fixed in 1.14.0.
PublicCMS V5.202506.b is vulnerable to SSRF. in the chat interface of SimpleAiAdminController.
Arbitrary file read in Zabbix Frontend 7.4.0 through 7.4.2 allows an authenticated Super Admin to exploit the oauth.authorize action to read files from the web server, resulting in confidentiality loss. The requirement for the highest-privilege role makes this primarily an insider-abuse or post-compromise vulnerability, not an external attack vector. EPSS is very low (0.03%) and no public exploit has been identified; the vendor has released patches.
Server-side request forgery in Mogu Blog v2 up to version 5.2 allows remote, unauthenticated attackers to force the server to issue arbitrary HTTP requests via the uploadPictureByUrl function in the /file/uploadPicsByUrl endpoint. Publicly available exploit code
Server-side request forgery in orion-ops allows authenticated remote attackers to manipulate SSH connection parameters (host, port, credentials) to trigger outbound requests from the server, potentially reaching internal services. The vulnerability affects all versions up to commit 5925824 and has a publicly available proof-of-concept exploit. Exploitation requires low-privilege access and may impact confidentiality, integrity, and availability of internal assets.
Server-side request forgery in deco-cx apps 0.120.1 and earlier allows a low-privileged remote attacker to manipulate the `url` parameter in the AnalyticsScript loader, forcing the server to fetch arbitrary URLs. This can result in low-impact information disclosure, internal network reconnaissance, or interaction with internal services. A public exploit exists, but there is no evidence of active exploitation (EPSS 0.05%); upgrading to version 0.120.2 removes the vulnerable parameter.
A vulnerability was found in ZenTao up to 21.7.6-8564. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
LibreChat is a ChatGPT clone with additional features. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
The AI ChatBot with ChatGPT and Content Generator by AYS plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.7.0 via the. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
NVIDIA NeMo Agent Toolkit UI for Web contains a vulnerability in the chat API endpoint where an attacker may cause a Server-Side Request Forgery. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A vulnerability was found in lKinderBueno Streamity Xtream IPTV Player up to 2.8. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
The WP Shortcodes Plugin - Shortcodes Ultimate plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 7.4.5 via the su_shortcode_csv_table function. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Azure Monitor Elevation of Privilege Vulnerability. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Server-Side Request Forgery (SSRF) vulnerability in Progress MOVEit Transfer.1.8, from 2025.0.0 before 2025.0.4. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
The Responsive Lightbox & Gallery plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.5.3 via the 'get_image_size_by_url' function. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Local Agent DVR versions thru 6.6.1.0 are vulnerable to directory traversal that allows an unauthenticated local attacker to gain access to sensitive information, cause a server-side forgery request. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.
The AI Engine plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.1.8 via the rest_helpers_create_images function. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
The Icon List Block - Add Icon-Based Lists with Custom Styles plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.2.1 via the fs_api_request. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
The WP Migrate Lite - WordPress Migration Made Easy plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.7.6 via the wpmdb_flush AJAX. Rated medium severity (CVSS 5.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
The Local Syndication plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.5a via the `url` parameter in the `[syndicate_local]` shortcode. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
PDFPatcher thru 1.1.3.4663 executable's XML bookmark import functionality does not restrict XML external entity (XXE) references. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A weakness has been identified in rachelos WeRSS we-mp-rss up to 1.4.7. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A Server-side Request Forgery vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Probing of internal infrastructure. Rated low severity (CVSS 3.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
grist-core is a spreadsheet hosting server. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
Typebot is an open-source chatbot builder. Rated critical severity (CVSS 9.6), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Astro is a web framework. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Server-side request forgery in MaxKB (open-source AI assistant from 1Panel-dev) allows an authenticated user with permission to author or edit tools in the Python tool module to escape the intended network isolation of the code-execution sandbox and reach internal network services such as databases. All versions prior to 2.3.1 are affected; the vendor fixed the issue in 2.3.1. Exploitation requires a valid MaxKB account with tool-authoring privileges (PR:L per the assessed vector), and the realistic impact depends on which internal services are network-reachable from the MaxKB host. EPSS is low (0.08%, 23rd percentile) and no public exploit code has been identified at time of analysis.
Lichess lila before commit 11b4c0fb00f0ffd823246f839627005459c8f05c (2025-06-02) contains a Server-Side Request Forgery (SSRF) vulnerability in the game export API. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
If an attacker causes kdcproxy to connect to an attacker-controlled KDC server (e.g. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
If kdcproxy receives a request for a realm which does not have server addresses defined in its configuration, by default, it will query SRV records in the DNS zone matching the requested realm name. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Origin Validation Error in Kibana can lead to Server-Side Request Forgery via a forged Origin HTTP header processed by the Observability AI Assistant. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A local server-side request forgery (SSRF) security issue exists within Studio 5000® Simulation Interface™ via the API. Rated high severity (CVSS 8.9), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Soft Serve is a self-hostable Git server for the command line. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Jellysweep is a cleanup tool for the Jellyfin media server. Rated high severity (CVSS 8.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
ThinkDashboard is a self-hosted bookmark dashboard built with Go and vanilla JavaScript. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
A Server-Side Request Forgery (SSRF) vulnerability, achievable through an XML External Entity (XXE) injection, exists in MetInfo Content Management System (CMS) thru 8.1. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A Server-Side Request Forgery (SSRF) in the /api/proxy/ component of linshenkx prompt-optimizer v1.3.0 to v1.4.2 allows attackers to scan internal resources via a crafted request. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 8.6.0 via the getFullContent() function. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
DataEase is an open source data visualization analysis tool. Rated high severity (CVSS 8.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
The B Carousel Block - Responsive Image and Content Carousel plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 1.1.5. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.8.11 via the wpematico_test_feed() function. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
LinkAce is a self-hosted archive to collect website links. Rated low severity (CVSS 2.3), this vulnerability is remotely exploitable. Public exploit code available.
Unauthenticated SSRF in Halo CMS 2.21 exposes internal network infrastructure to remote attackers via the Thumbnail via-uri endpoint, which performs server-side HTTP GET requests to attacker-supplied URLs without allowlist or blocklist enforcement. Beyond initiating outbound connections to attacker-controlled hosts, the endpoint issues a 307 redirect that leaks internal URLs in the Location header, enabling internal network reconnaissance. EPSS is low (0.27%, 19th percentile) with no CISA KEV listing, but a public researcher disclosure document exists, lowering the barrier to exploitation.
Missing permission checks in Jenkins Start Windocks Containers Plugin 1.4 and earlier let any authenticated user holding the baseline Overall/Read permission force the Jenkins controller to make an outbound HTTP connection to a URL of the attacker's choosing, a classic server-side request forgery (SSRF) pattern with integrity-only impact. Only Jenkins instances with the plugin installed are affected; the Jenkins core itself is not vulnerable, and exploitation requires a valid account with at least read-level access, so anonymous or unauthenticated attacks are not indicated by the assessed vector (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N, score 4.3). Severity signals are mutually consistent and point to a genuine-but-low-priority issue: EPSS is just 0.25% (15th percentile), no public exploit code has been identified at time of analysis, and there is no CISA KEV listing indicating active exploitation.
Server-side request forgery in Astro's built-in image proxy lets unauthenticated remote attackers force the server to fetch arbitrary external URLs by placing backslash-prefixed values (\, \\, or URL-encoded %5C) in the href parameter of the /_image endpoint, bypassing the domain validation added for CVE-2025-58179. The flaw affects Astro versions 5.13.4 through 5.13.9 on Node.js and carries secondary XSS potential because the proxied response - for example an attacker-hosted SVG - is subsequently rendered in a victim's browser context; it is rated CVSS 7.2 (AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) and maps to CWE-79 in the NVD record despite the underlying weakness being an SSRF/URL-validation bypass. Publicly available exploit code exists (the GHSA proof of concept targets Astro's own hosted image endpoint), while EPSS remains low at 0.35% (27th percentile) and the practical attack surface is limited to deployments running the on-demand image service rather than purely static builds. A vendor-released patch is available: Astro 5.13.10.
Server-side request forgery in IBM Concert 1.0.0 through 2.0.0 allows an authenticated user who can reach a URL-fetching feature to make the server issue requests to attacker-chosen destinations, enabling internal network enumeration and access to services or cloud metadata endpoints reachable from the Concert host's network position. The flaw (CWE-918, CVSS 5.4, vector AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) requires a valid low-privileged account and no user interaction, and its impact is bounded by what the server itself can reach. No public exploit code has been identified at time of analysis and EPSS is only 0.16% (5th percentile), so this is not a confirmed-actively-exploited issue and represents low real-world priority.
Server-Side Request Forgery in the Codeless Slider Templates WordPress plugin (versions ≤1.0.3) enables authenticated low-privilege users to induce the server to make arbitrary outbound HTTP requests, potentially reaching internal network resources such as cloud metadata services or private APIs. The CVSS vector (AV:N/AC:H/PR:L/S:C/C:L/I:L) confirms network exploitation requires an authenticated WordPress account and high attack complexity, with scope change indicating cross-boundary impact on internal infrastructure. No active exploitation is confirmed - EPSS sits at 0.03% (10th percentile) and no KEV listing exists - placing this firmly in the low real-world priority tier despite the scope change.
Unauthenticated server-side request forgery in the WordPress plugin Popup Builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers (popup-builder-block) affects all versions up to and including 2.1.4 and lets any remote client that can reach an affected site force the web server to issue HTTP requests to arbitrary destinations. Because the CVSS vector is PR:N/UI:N, no authentication, user interaction, or non-default configuration is required - the plugin merely has to be installed and active with its demo-fetch route reachable - and the highest-rated impact is confidentiality (C:H) via querying internal services, cloud metadata endpoints, or other hosts on the server's network, with secondary use for network reconnaissance and, per the description, potential modification of internal service state. Exploitation signals are limited: no public exploit code was identified at time of analysis, CISA KEV does not list this CVE, and EPSS is low at roughly 0.38% (30th percentile), so this is a credible-but-not-urgent priority rather than an active incident. Note that version 2.1.4 is only a partial patch, so simply moving to 2.1.4 may not fully eliminate the condition.
Server-side request forgery (SSRF) in the Real Cookie Banner WordPress plugin versions up to and including 5.2.4 allows authenticated attackers with administrator-level access to make arbitrary web requests from the server via the 'url' parameter in the '/scanner/scan-without-login' REST API endpoint, potentially querying and modifying information from internal services. The vulnerability requires high privileges (PR:H) and has a moderate CVSS score of 6.8 (NVD) with an EPSS of 0.39%, indicating a low likelihood of exploitation. No public exploit code or active exploitation has been identified at the time of analysis.
Server-side request forgery (SSRF) in the Orbit Fox WordPress plugin before 3.0.2 allows authenticated users to force the server to fetch arbitrary URLs via the stock photo import feature, leading to limited confidentiality and integrity impact (CVSS 5.5, Medium). The assessed vector requires low privileges (PR:L), though the vendor originally rated it high (PR:H); no public exploit has been identified, and EPSS is 0.19% (8th percentile), indicating low real-world risk. The flaw does not itself grant code execution or full data disclosure, but it can be used to probe internal networks or access internal services.
Server-side request forgery in Microsoft's cloud-hosted Azure Compute Gallery allows unauthenticated remote attackers to coerce the Azure Compute Resource Provider into issuing attacker-influenced requests, ultimately elevating privileges within the service. Per the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base 9.8), exploitation is network-reachable, low complexity, requires no authentication and no user interaction, and yields high confidentiality and integrity impact; the scope is unchanged. There is confirmed no public exploit code and no CISA KEV listing at time of analysis - no public exploit identified at time of analysis - and the EPSS score is modest at 0.77% (54th percentile), reflecting that the primary constraint is operational: the target is a Microsoft-operated multi-tenant service remediated centrally by Microsoft, not by customer patch deployment.
Server-side request forgery in the Feedzy RSS Aggregator plugin for WordPress (all versions up to and including 5.1.0) allows an authenticated attacker with Subscriber-level access or above to point the plugin's feed-sanitization routine at arbitrary URLs, causing the web server to fetch internal-only hosts, intranet services, or cloud metadata endpoints on their behalf. The flaw is remote and requires no user interaction, and it carries a scope change because the vulnerable application is used as a proxy into other systems, but the consequence is confidentiality-only - reading responses from reachable internal targets - with no integrity or availability effect. No public exploit code has been identified at time of analysis and EPSS is 0.29% (20th percentile), so opportunistic mass exploitation is unlikely; the practical barrier is that an attacker must first obtain a low-privilege account, which sites with open self-registration effectively hand out.
Blind server-side request forgery in the MxChat - AI Chatbot for WordPress plugin (mxchat-basic) up to and including version 2.4.6 lets remote attackers coerce the WordPress server into making HTTP requests to arbitrary destinations through the unauthenticated mxchat_handle_chat_request AJAX action, which passes user-supplied URLs into the plugin's PDF processing routine without adequate validation. Because the CVSS vector is AV:N/AC:L/PR:N/UI:N, no credentials or victim interaction are required, but impact is confined to confidentiality (C:L) with no integrity or availability effect, and the blind nature of the flaw means the attacker never sees the fetched response - real-world risk therefore hinges on whether the host can reach sensitive internal services or a cloud metadata endpoint. No public exploit code was identified at time of analysis and CISA KEV does not list this CVE; EPSS is only 0.29% (20th percentile), consistent with a moderate-severity, low-priority issue that should not jump the patch queue despite being remotely and unauthenticatedly reachable.
Server-side request forgery (SSRF) in FastGPT versions prior to 4.11.1 allows an attacker who can control the URL passed to the workflow file-reading node to force the server to make arbitrary network requests, potentially reaching internal services or cloud metadata endpoints. Exploitation generally requires access to the workflow builder, which is typically behind authentication depending on deployment; no public exploit code has been identified at time of analysis (EPSS 0.24%). The issue is patched in version 4.11.1.
Server-side request forgery in Icegram Express Pro (email-subscribers-premium) versions up to 5.9.5 allows an authenticated attacker with high privileges to force the WordPress plugin to perform server-side HTTP requests to arbitrary destinations. High attack complexity (AC:H) and high privileges (PR:H) limit exploitability, and the EPSS score is 0.21% (10th percentile); no public exploit identified at time of analysis. The CVSS 3.1 vector (AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) indicates low confidentiality and integrity impact confined to scope change, making this a low-to-moderate priority issue.
Server-Side Request Forgery in the Captcha.eu WordPress plugin (versions ≤ 1.0.61) allows unauthenticated remote attackers to make the server issue requests to internal or external services. This can lead to information disclosure or limited interaction with other systems, though high attack complexity reduces exploitability. No active exploitation or public exploit code is known, and EPSS indicates a very low probability of real-world attacks.
Server-side request forgery in Zimbra Collaboration Suite (ZCS) before 10.1.12 lets an authenticated user who can reach the chat feature abuse the misconfigured chat proxy to make the Zimbra server issue requests to internal or otherwise unreachable network services. The vulnerability carries a CVSS of 5.0 (AV:N/AC:L/PR:L/UI:N/S:C) and is rated low by threat intelligence signals - EPSS is only 0.26% (16th percentile) and there is no public exploit identified at time of analysis - because the attacker must already hold valid credentials and the chat proxy must be configured and reachable. Exploitation requires no victim interaction, but real-world impact is bounded by which internal services the Zimbra host can reach; our independent assessment rates the confidentiality impact as low (C:L/I:N) rather than the integrity impact NVD records.
Blind server-side request forgery in the Element Pack Addons for Elementor WordPress plugin (all versions up to and including 8.2.5) allows an authenticated user with Subscriber-level access or above to force the web server to issue HTTP requests to arbitrary internal destinations through the wp_ajax_import_elementor_template AJAX action. Because Subscriber is the lowest standard WordPress role, the exposure widens sharply on any site that permits open self-registration, where any visitor can obtain the necessary account. The request is blind (no response body is returned to the attacker), so impact is constrained to inference-based reconnaissance, internal port/service probing, and potential modification of internal services; CVSS 3.1 scores it 5.0 (AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N), reflecting the cross-boundary scope change but limited confidentiality-only effect. EPSS is low at 0.24% (14th percentile), the issue is not listed in CISA KEV, and no public exploit code was identified at time of analysis, making this a moderate-priority, patch-when-convenient finding rather than an emergency.
Server-Side Request Forgery in Gutenberg Essential Blocks plugin for WordPress allows authenticated attackers with Author-level or higher privileges to make arbitrary web requests originating from the vulnerable server via the eb_save_ai_generated_image function, enabling reconnaissance and manipulation of internal services. Affects all versions up to 5.7.1 with CVSS 6.4 severity; no active KEV status or public exploit code confirmed at time of analysis.
Server-side request forgery in LobeChat 1.136.1 and earlier lets an authenticated user drive the server's own network position by calling the tools.search.crawlPages tRPC endpoint with an arbitrary urls array and impls set to ["naive"], causing the naive web-crawler implementation to fetch attacker-chosen URLs - including localhost, private ranges, and the cloud metadata address 169.254.169.254 - without any internal-address validation. In production this requires a valid user token (the CVSS vectors agree on an authenticated prerequisite, though NVD rates it PR:H and our assessment PR:L); the development-mode-only lobe-auth-dev-backend-api:1 header bypass is what the published proof-of-concept uses to read an internal API at localhost:8889, so publicly available exploit code exists. Impact is bounded to read-only information disclosure from reachable internal HTTP services, EPSS is low at 0.32% (23rd percentile), there is no CISA KEV entry, and the vendor shipped a fix in version 1.136.2.
SVG-based server-side request forgery in ThingsBoard versions prior to 4.2.1 allows upload of crafted SVG files containing external URL references to the dashboard Image Upload Gallery, causing the platform to initiate unintended outbound HTTP requests toward internal network resources. All ThingsBoard deployments (community, professional edition) running versions before 4.2.1 are affected via this gallery feature. No public exploit code or CISA KEV listing exists at time of analysis; however, the upstream fix in PR #13927 - which adds a Content-Security-Policy response header rather than sanitizing SVG content at upload - indicates the primary exploitation path may be browser-mediated rather than purely server-side, warranting scrutiny of the PR:N (no privileges required) CVSS assignment.
Server-side request forgery in NucleoidAI Nucleoid 0.7.10 and earlier lets unauthenticated remote attackers steer outbound requests issued by the runtime: when the Outbound Request Handler path (extension.apply in /src/cluster.ts) is exercised with externally influenced https/ip/port/path/headers arguments, the attacker controls the destination the server connects to. Per the assessed vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) no authentication or user interaction is required and complexity is low, but impact is constrained to LOW confidentiality, integrity and availability for the Nucleoid host itself, with no scope change - real damage depends on what internal services, metadata endpoints, or flat internal networks the host can reach. No confirmed actively exploited in CISA KEV, no public exploit identified at time of analysis, and EPSS is low at 0.46% (38th percentile), so this is a moderate, not urgent, priority, further limited by Nucleoid being a niche runtime with relatively few internet-exposed deployments that also pass remote input into this code path.
Server-side request forgery in Angular's @angular/ssr package (all versions from 19.0.0-next.0 before 19.2.18, 20.0.0-next.0 before 20.3.6, and 21.0.0-next.0 before 21.0.0-next.8) lets a remote unauthenticated attacker redirect server-side relative HTTP requests to an arbitrary external host by submitting a request path beginning with a double forward slash (//) or backslash. The flaw lives in the createRequestUrl helper, where the native URL constructor interprets a leading '//' as a scheme-relative URL and silently replaces the trusted base host with an attacker-controlled hostname, so the page's virtual location (exposed via DOCUMENT/PlatformLocation) and any subsequent relative fetch such as HttpClient.get('assets/data.json') resolve against the attacker's domain. Exploitation is conditional: the SSR application must actually perform relative server-side fetches during rendering, and the request path must reach createRequestUrl without being normalized by an upstream proxy; no public exploit code has been identified and EPSS is low at 0.43% (35th percentile), though the flaw is remotely reachable and unauthenticated per the assessed vector (PR:N/UI:N).
Server-side request forgery in the WordPress Task Scheduler plugin (all versions up to and including 1.6.3) allows an authenticated Administrator-level user to make the WordPress server send arbitrary HTTP requests through the plugin's 'Check Website' task, potentially querying or modifying internal services that are not externally reachable. This is a low-priority issue despite being network-reachable: successful exploitation requires high privileges (PR:H), the value depends on reachable internal network targets, EPSS is 0.24% (14th percentile), and no public exploit identified at time of analysis.
Server-side request forgery in the Pz-LinkCard WordPress plugin before version 2.5.7 allows a user with as little as Contributor privileges to make the site's server send HTTP requests to an attacker-influenced destination, because a request parameter is used to build an outbound request without validation. The independent assessment rates this as low severity (CVSS 3.1 base 3.8, AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N), and the EPSS score of 0.19% (8th percentile) reinforces that real-world exploitation is unlikely; no exploit code and no CISA KEV entry have been identified at time of analysis. Risk is concentrated on sites that leave the plugin active and allow open or low-privilege registration, since a valid Contributor account is a prerequisite.