CVE-2025-47464

Server-Side Request Forgery SSRF vulnerability in solacewp Solace Extra solace-extra allows Server Side Request Forgery.This issue affects Solace Extra: from n/a through = 1.3.1...

CVE-2025-47664

Server-Side Request Forgery SSRF vulnerability in ThimPress WP Pipes allows Server Side Request Forgery. This issue affects WP Pipes: from n/a through 1.4.2...

CVE-2025-47484

Server-Side Request Forgery SSRF vulnerability in Oliver Campion Display Remote Posts Block display-remote-posts-block allows Server Side Request Forgery.This issue affects Display Remote Posts Block: from n/a through = 1.1.0...

CVE-2025-45887

Yifang CMS v2.0.2 is vulnerable to Server-Side Request Forgery SSRF in /api/file/getRemoteContent...

CVE-2025-45887

Yifang CMS v2.0.2 is vulnerable to Server-Side Request Forgery SSRF in /api/file/getRemoteContent...

CVE-2025-45887

Yifang CMS v2.0.2 is vulnerable to Server-Side Request Forgery SSRF in /api/file/getRemoteContent...

PT-2025-20558

Name of the Vulnerable Software and Affected Versions Yifang CMS version 2.0.2 Description The issue is related to Server-Side Request Forgery SSRF in the "/api/file/getRemoteContent" API endpoint. This allows an attacker to forge requests from the server to an arbitrary destination, potentially...

CVE-2025-45887

Yifang CMS v2.0.2 is affected by a Server-Side Request Forgery (SSRF) vulnerability in the /api/file/getRemoteContent endpoint. The CVE-2025-45887 entry shows a CVSSv3.1 base score of 9.1 (CRITICAL) with network attack vector, low attack complexity, no privileges required, and no user interaction...

CVE-2025-47733

Server-Side Request Forgery SSRF in Microsoft Power Apps allows an unauthorized attacker to disclose information over a network...

CVE-2025-29972

Server-side request forgery ssrf in Azure Storage Resource Provider allows an authorized attacker to perform spoofing over a network...

Security Bulletin: The IBM® Engineering Lifecycle Engineering products using IBM Java: Two OpenJ9 internal ASCII to EBCDIC string wrapper has vulnerabilities on z/OS (CVE-2025-1470, CVE-2025-1471)

Summary IBM WebSphere Application Server is vulnerable to server-side request forgery. Following IBM® Engineering Lifecycle Engineering products are vulnerable to this attack, it has been addressed in this bulletin: IBM Engineering Test Management, IBM Engineering Lifecycle Optimization -...

Azure Storage Resource Provider Spoofing Vulnerability

Server-side request forgery ssrf in Azure Storage Resource Provider allows an authorized attacker to perform spoofing over a network...

Microsoft Power Apps Information Disclosure Vulnerability

Server-Side Request Forgery SSRF in Microsoft Power Apps allows an unauthorized attacker to disclose information over a network...

CVE-2025-45250

MrDoc v0.95 and before is vulnerable to Server-Side Request Forgery SSRF in the validateurl function of the appdoc/utils.py file...

PT-2025-20430 · Microsoft · Azure

Name of the Vulnerable Software and Affected Versions: Azure affected versions not specified Description: The issue is related to Server-Side Request Forgery SSRF in Azure, which allows an authorized attacker to perform spoofing over a network. Recommendations: At the moment, there is no...

PT-2025-20433 · Microsoft · Power Apps

Name of the Vulnerable Software and Affected Versions: Microsoft Power Apps affected versions not specified Description: The issue is related to Server-Side Request Forgery SSRF in Microsoft Power Apps, allowing an unauthorized attacker to disclose information over a network. No information is...

WordPress WP Pipes plugin <= 1.4.3 - Server Side Request Forgery (SSRF) Vulnerability

Server Side Request Forgery SSRF Vulnerability discovered by domiee13 in WordPress Plugin WP Pipes versions = 1.4.3...

CVE-2025-47664

Server-Side Request Forgery SSRF vulnerability in ThimPress WP Pipes allows Server Side Request Forgery. This issue affects WP Pipes: from n/a through 1.4.2...

CVE-2025-47635

Server-Side Request Forgery SSRF vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Server Side Request Forgery.This issue affects WebinarPress: from n/a through = 1.33.28...

CVE-2025-47548

Server-Side Request Forgery SSRF vulnerability in Varun Dubey Wbcom Designs - Activity Link Preview For BuddyPress activity-link-preview-for-buddypress allows Server Side Request Forgery.This issue affects Wbcom Designs - Activity Link Preview For BuddyPress: from n/a through = 1.4.4...