Skip to main content

Url Media Uploader

1 CVEs product

Monthly

CVE-2025-1662 Feb 28, 09:15 MEDIUM This Month

The URL Media Uploader plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.0.0 via the 'url_media_uploader_url_upload' action. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress SSRF Url Media Uploader Wordpress Plugin
NVD
CVSS 3.1
6.4
EPSS
0.1%
EPSS 0% CVSS 6.4
MEDIUM This Month

The URL Media Uploader plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.0.0 via the 'url_media_uploader_url_upload' action. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress SSRF Url Media Uploader +1
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy