CVE-2025-31076 WordPress WP Compress for MainWP plugin <= 6.30.03 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in WP Compress WP Compress for MainWP allows Server Side Request Forgery. This issue affects WP Compress for MainWP: from n/a through 6.30.03...

CVE-2025-31076

CVE-2025-31076: WordPress WP Compress for MainWP contains an SSRF vulnerability (Authenticated, Subscriber+). Affected version range: up to 6.30.03. Attack vector and specific endpoint details are not provided in the documents, but the issue is classified as Server-Side Request Forgery with a CVS...

CVE-2025-28089

maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery SSRF via the Scheduled Task function...

CVE-2025-28096

OneNav 1.1.0 is vulnerable to Server-Side Request Forgery SSRF in custom headers...

PT-2025-13582 · Maccms10 · Maccms10

Name of the Vulnerable Software and Affected Versions: maccms10 version 2025.1000.4047 Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability. This vulnerability can be exploited via the Add Article feature. Recommendations: For maccms10 version 2025.1000.4047, as a...

CVE-2025-28091

CVE-2025-28091 pertains to the maccms10 package, version 2025.1000.4047, which is affected by a Server-Side Request Forgery (SSRF) in the Add Article feature. The vulnerability is documented across multiple sources (NVD, Red Hat, CVE list, etc.), confirming the affected product and the vulnerabil...

CVE-2025-28093

ShopXO CVE-2025-28093 affects ShopXO v6.4.0 with a Server-Side Request Forgery (SSRF) in the Email Settings feature. Exploitation arises from insufficient validation of user-supplied URLs, enabling the server to initiate arbitrary outbound requests to internal or external resources. The CVSSv3.1 ...

CVE-2025-28090

CVE-2025-28090 affects maccms10 v2025.1000.4047 with a Server-Side Request Forgery (SSRF) in the Collection Custom Interface feature. Root cause is an SSRF in that feature, enabling the server to make unintended requests. CVSS 3.1 base score 9.1 (CRITICAL) with network attack vector, no user inte...

PT-2025-13581 · Maccms10 · Maccms10

Name of the Vulnerable Software and Affected Versions: maccms10 version 2025.1000.4047 Description: The issue is related to Server-Side Request Forgery SSRF via the Scheduled Task function. Recommendations: For version 2025.1000.4047, consider disabling the Scheduled Task function until a patch i...

CVE-2025-28089

maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery SSRF via the Scheduled Task function...

CVE-2025-28093

ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery SSRF in Email Settings...

CVE-2025-28096

OneNav 1.1.0 is vulnerable to Server-Side Request Forgery SSRF in custom headers...

CVE-2025-28089

CVE-2025-28089 affects maccms10 v2025.1000.4047 via a Server-Side Request Forgery (SSRF) vulnerability in the Scheduled Task function. The CVSS v3.1 base score is 9.1 (CRITICAL) with NETWORK attack vector, LOW attack complexity, no privileges, no user interaction, and high confidentiality and int...

PT-2025-13589 · Shopxo · Shopxo

Name of the Vulnerable Software and Affected Versions: ShopXO version 6.4.0 Description: The issue is related to Server-Side Request Forgery SSRF in the Email Settings. This means an attacker could potentially forge requests from the server, leading to unauthorized access to internal systems or...

CVE-2025-28096

OneNav 1.1.0 is vulnerable to Server-Side Request Forgery SSRF in custom headers...

CVE-2025-28093

ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery SSRF in Email Settings...

PT-2025-13587 · Maccms10 · Maccms10

Name of the Vulnerable Software and Affected Versions: maccms10 version 2025.1000.4047 Description: The issue is related to Server-Side Request Forgery SSRF in the Collection Custom Interface feature. This allows an attacker to trick the server into making unintended requests. Recommendations: Fo...

CVE-2025-28091

maccms10 v2025.1000.4047 has a Server-Side Request Forgery SSRF vulnerability via Add Article...

CVE-2025-28091

maccms10 v2025.1000.4047 has a Server-Side Request Forgery SSRF vulnerability via Add Article...

CVE-2025-28096

CVE-2025-28096 affects OneNav 1.1.0. The vulnerability is Server-Side Request Forgery (SSRF) in custom headers. CVSSv3.1 base score 5.4 (MEDIUM); attack vector NETWORK; privileges required LOW; user interaction REQUIRED; impact is Confidentiality/Integrity LOW, Availability NONE. Root cause and e...