Advisories · Weakness
Server-side request forgery (SSRF).
The server made to send requests an attacker chooses. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 8.6 High
LibreChat is Vulnerable to Server-Side Request Forgery (SSRF) in Actions Capability
- danny-avila LibreChat
- Server-side request forgery (SSRF)
- CWE-20
- CVSS 6.5 Medium
AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.0 - Unauthenticated Server-Side Request Forgery via 'pinecone_url' Parameter
- ays-pro AI ChatBot with ChatGPT and Content Generator by AYS
- Server-side request forgery (SSRF)
- CVSS 8.7 High
UnForm Server < 10.1.15 Doc Flow Unauthenticated File Read
- Synergetic Data Systems, Inc. UnForm Server
- Path traversal
- Server-side request forgery (SSRF)
- CVSS 7.6 High
Server-side request forgery in NVIDIA NeMo Agent ToolKit
- NVIDIA NeMo Agent ToolKit
- Server-side request forgery (SSRF)
- CVSS 8.5 High
new-api is vulnerable to SSRF Bypass
- Server-side request forgery (SSRF)
<0.9.6 · fixed in 0.9.6
GHSA-9f46-w24h-69w4 · CVE-2025-62155 - CVSS 5.3 Medium
lKinderBueno Streamity Xtream IPTV Player proxy.php server-side request forgery
- lKinderBueno Streamity Xtream IPTV Player
- Server-side request forgery (SSRF)
- CVSS 6.4 Medium
WP Shortcodes Plugin — Shortcodes Ultimate <= 7.4.5 - Authenticated (Administrator+) Server-Side Request Forgery
- gn_themes WP Shortcodes Plugin — Shortcodes Ultimate
- Server-side request forgery (SSRF)
- CVSS 8.6 High
Azure Monitor Elevation of Privilege Vulnerability
- Microsoft Azure Monitor Control Service
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
External Service Interaction (DNS)
- Progress MOVEit Transfer
- Server-side request forgery (SSRF)
- CVSS 5.4 Medium
Responsive Lightbox & Gallery <= 2.5.3 - Authenticated (Author+) Server-Side Request Forgery
- dfactory Responsive Lightbox & Gallery
- Server-side request forgery (SSRF)
- CVSS 6.4 Medium
Icon List Block – Add Icon-Based Lists with Custom Styles <= 1.2.1 - Authenticated (Subscriber+) Server-Side Request Forgery
- bplugins Icon List Block – Add Icon-Based Lists with Custom Styles
- Server-side request forgery (SSRF)
- CVSS 6.8 Medium
AI Engine <= 3.1.8 - Authenticated (Editor+) Server-Side Request Forgery
- tigroumeow AI Engine – The Chatbot, AI Framework & MCP for WordPress
- Server-side request forgery (SSRF)
- CVSS 5.8 Medium
WP Migrate Lite <= 2.7.6 - Unauthenticated Blind Server-Side Request Forgery
- wpengine WP Migrate Lite – Migration Made Easy
- Server-side request forgery (SSRF)
- CVSS 6.4 Medium
Local Syndication <= 1.5a - Authenticated (Contributor+) Server-Side Request Forgery via Shortcode
- willbontrager Local Syndication
- Server-side request forgery (SSRF)
- CVSS 5.1 Medium
Local Agent DVR versions thru 6.6.1.0 are vulnerable to directory traversal that allows an unauthenticated local attacker to gain access to sensitive information, cause a server-side forgery request…
- Command injection
- Server-side request forgery (SSRF)
- CVSS 8.9 High
Jellysweep uses uncontrolled data in image cache API endpoint in github.com/jon4hz/jellysweep
- Server-side request forgery (SSRF)
<0.13.0 · fixed in 0.13.0
GHSA-xc93-q32j-cpcg · CVE-2025-64178 - CVSS 9.1 CriticalCritical · CVSS 9+
Soft Serve is vulnerable to SSRF through its Webhooks in github.com/charmbracelet/soft-serve
- Server-side request forgery (SSRF)
<0.11.1 · fixed in 0.11.1
GHSA-vwq2-jx9q-9h9f · CVE-2025-64522 - CVSS 5.3 Medium
rachelos WeRSS we-mp-rss Webhook mps.py do_job server-side request forgery
- rachelos WeRSS we-mp-rss
- Server-side request forgery (SSRF)
- CVSS 3.8 Low
A Server-side Request Forgery vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Probing of internal infrastructure.
- Server-side request forgery (SSRF)
- CVSS 6.5 Medium
Astro vulnerable to URL manipulation via headers, leading to middleware and CVE-2025-61925 bypass
- Server-side request forgery (SSRF)
>=2.16.0, <5.15.5 · fixed in 5.15.5
GHSA-hr2q-hp5q-x767 · CVE-2025-64525 - CVSS 6.8 Medium
grist-core has path to server-side requests via websocket
- gristlabs grist-core
- Server-side request forgery (SSRF)
- CVSS 9.6 CriticalCritical · CVSS 9+
Typebot May Expose AWS EKS Credentials via Server Side Request Forgery in Webhook Block
- baptisteArno typebot.io
- Server-side request forgery (SSRF)
- CVSS 7.4 High
MaxKB has SSRF in sandbox
- 1Panel-dev MaxKB
- Server-side request forgery (SSRF)
- CVSS 6.5 Medium
Lichess lila before commit 11b4c0fb00f0ffd823246f839627005459c8f05c (2025-06-02) contains a Server-Side Request Forgery (SSRF) vulnerability in the game export API.
- Server-side request forgery (SSRF)
- CVSS 8.6 High
Python-kdcproxy: unauthenticated ssrf via realm‑controlled dns srv
- latchset kdcproxy
- Red Hat Enterprise Linux 10
- Server-side request forgery (SSRF)
- CVSS 10.0 CriticalCritical · CVSS 9+
Manager-io/Manager: Complete Bypass of SSRF Protection via Time-of-Check Time-of-Use (TOCTOU)
- Manager
- Race condition
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
ThinkDashboard: Blind Server-Side Request Forgery (SSRF) vulnerability in /api/ping Endpoint
- MatiasDesuu ThinkDashboard
- Server-side request forgery (SSRF)
- CVSS 4.3 Medium
Blog2Social: Social Media Auto Post & Scheduler <= 8.6.0 - Authenticated (Subscriber+) Blind Server-Side Request Forgery via post_url
- pr-gateway Blog2Social: Social Media Auto Post & Scheduler
- Server-side request forgery (SSRF)
- CVSS 7.5 High
A Server-Side Request Forgery (SSRF) vulnerability, achievable through an XML External Entity (XXE) injection, exists in MetInfo Content Management System (CMS) thru 8.1.
- XML external entities (XXE)
- Server-side request forgery (SSRF)
- CVSS 7.3 High
A Server-Side Request Forgery (SSRF) in the /api/proxy/ component of linshenkx prompt-optimizer v1.3.0 to v1.4.2 allows attackers to scan internal resources via a crafted request.
- Server-side request forgery (SSRF)
- CVSS 8.9 High
DataEase's DB2 is vulnerable to SSRF
- dataease
- Server-side request forgery (SSRF)
- CVSS 7.5 High
Parse Server Vulnerable to Server-Side Request Forgery (SSRF) in File Upload via URI Format
- Server-side request forgery (SSRF)
>=4.2.0, <7.5.4 || >=8.0.0, <8.4.0-alpha.2 · fixed in 7.5.4, 8.4.0-alpha.2
GHSA-x4qj-2f4q-r4rx · CVE-2025-64430 - CVSS 6.4 Medium
B Carousel Block – Responsive Image and Content Carousel <= 1.1.5 - Missing Authorization to Authenticated (Subscriber+) Server-Side Request Forgery
- bplugins Carousel Block – Responsive Image and Content Carousel
- Server-side request forgery (SSRF)
- CVSS 6.4 Medium
WPeMatico RSS Feed Fetcher <= 2.8.11 - Authenticated (Subscriber+) Server-Side Request Forgery via wpematico_test_feed
- etruel WPeMatico RSS Feed Fetcher
- Server-side request forgery (SSRF)
- CVSS 2.3 Low
LinkAce: Limited Server-Side Request Forgery (SSRF) in Keyword Fetching Functionality
- Kovah LinkAce
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
Nagios XI < 5.6.11 Unauthenticated XSS and SSRF via Highcharts
- Nagios XI
- Cross-site scripting (XSS)
- Server-side request forgery (SSRF)
- CVSS 9.3 CriticalCritical · CVSS 9+
Mingyu Operations and Maintenance Audit and Risk Control System xmlrpc.sock SSRF
- Anheng Information (Hangzhou DBAPP Security Information Technology Co., Ltd.) Mingyu Operations and Maintenance Audit and Risk Control System
- Authentication bypass
- Server-side request forgery (SSRF)
- CVSS 6.5 Medium
PerfreeBlog v4.0.11 is vulnerable to Server-Side Request Forgery due to a missing authorization check in the uploadAttachByUrl API endpoint (AttachController.java).
- Server-side request forgery (SSRF)
- CVSS 5.9 Medium
Keras is vulnerable to arbitrary local file loading and Server-Side Request Forgery
- Insecure deserialization
- Server-side request forgery (SSRF)
<3.12.0 · fixed in 3.12.0
GHSA-mq84-hjqx-cwf2 · CVE-2025-12058 - CVSS 5.8 Medium
An unauthenticated server-side request forgery (SSRF) vulnerability in the Thumbnail via-uri endpoint of Halo CMS 2.21 allows a remote attacker to cause the server to issue HTTP requests to attacker-…
- Server-side request forgery (SSRF)
- CVSS 7.2 High
Astro's bypass of image proxy domain validation leads to SSRF and potential XSS
- Cross-site scripting (XSS)
- Server-side request forgery (SSRF)
>=5.13.4, <5.13.10 · fixed in 5.13.10
GHSA-qcpr-679q-rhm2 · CVE-2025-59837 - CVSS 5.4 Medium
Multiple Vulnerabilities in IBM Concert Software.
- IBM Concert
- Server-side request forgery (SSRF)
- CVSS 4.9 Medium
WordPress Slider Templates plugin <= 1.0.3 - Server Side Request Forgery (SSRF) vulnerability
- Codeless Slider Templates
- Server-side request forgery (SSRF)
- CVSS 7.5 High
Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers <= 2.1.4 - Unauthenticated Server-Side Request Forgery
- roxnor Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers
- Server-side request forgery (SSRF)
- CVSS 5.9 Medium
SSRF and Reflected XSS Vulnerability in Deprecated Try-It Feature of Multiple WSO2 Products
- WSO2 Identity Server
- WSO2 Enterprise Integrator
- Cross-site scripting (XSS)
- Server-side request forgery (SSRF)
- CVSS 6.8 Medium
Real Cookie Banner: GDPR & ePrivacy Cookie Consent <= 5.2.4 - Authenticated (Admin+) Server-Side Request Forgery via scan-without-login Endpoint
- devowl Real Cookie Banner: GDPR & ePrivacy Cookie Consent
- Server-side request forgery (SSRF)
- CVSS 5.5 Medium
Orbit Fox < 3.0.2 - Author+ Server-Side Request Forgery
- Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More
- Server-side request forgery (SSRF)
- CVSS 10.0 CriticalCritical · CVSS 9+
Azure Compute Resource Provider Elevation of Privilege Vulnerability
- Microsoft Azure Compute Resource Provider
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
MxChat – AI Chatbot for WordPress <= 2.4.6 - Unauthenticated Blind Server-Side Request Forgery
- MxChat – AI Chatbot & Content Generation for WordPress
- Server-side request forgery (SSRF)
- CVSS 5.0 Medium
Feedzy RSS Feeds Lite <= 5.1.0 - Authenticated (Subscriber+) Server-Side Request Forgery
- themeisle RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
FastGPT File Reading Node SSRF Vulnerability
- labring FastGPT
- Server-side request forgery (SSRF)
- CVSS 4.4 Medium
WordPress Icegram Express Pro plugin <= 5.9.5 - Server Side Request Forgery (SSRF) vulnerability
- Icegram Express Pro
- Server-side request forgery (SSRF)
- CVSS 5.4 Medium
WordPress Captcha.eu plugin <= 1.0.61 - Server Side Request Forgery (SSRF) vulnerability
- Captcha.eu
- Server-side request forgery (SSRF)
- CVSS 2.7 Low
Shopware vulnerable to Server-Side Request Forgery (SSRF) – order invoice
- Server-side request forgery (SSRF)
<6.6.10.7 || >=6.7.0.0, <6.7.3.1 · fixed in 6.6.10.7, 6.7.3.1
GHSA-3cpp-fv95-mpr5 - CVSS 5.0 Medium
Server-side request forgery in Zimbra Collaboration
- Zimbra Collaboration
- Server-side request forgery (SSRF)
- CVSS 5.0 Medium
Element Pack Addons for Elementor <= 8.2.5 - Authenticated (Subscriber+) Blind Server-Side Request Forgery
- bdthemes Element Pack – Widgets, Templates & Addons for Elementor
- Server-side request forgery (SSRF)
- CVSS 7.6 High
An issue in Senayan Library Management System (SLiMS) 9 Bulian v.9.6.1 allows a remote attacker to execute arbitrary code via the scrap_image.php component and the imageURL parameter
- Code injection
- Server-side request forgery (SSRF)
- CVSS 6.4 Medium
Essential Blocks <= 5.7.1 - Authenticated (Author+) Server-Side Request Forgery
- wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
ThingsBoard < v4.2.1 SVG Image SSRF
- ThingsBoard
- Server-side request forgery (SSRF)
- CVSS 3.0 Low
Lobe Chat vulnerable to Server-Side Request Forgery with native web fetch module
- Server-side request forgery (SSRF)
<1.136.2 · fixed in 1.136.2
GHSA-fgx4-p8xf-qhp9 · CVE-2025-62505