PT-2025-11: Server-Side Request Forgery (SSRF) in HTML2PDF

During the analysis of the HTML2PDF library version 5.3.1, despite the existence of the defense mechanism that was implemented to validate source image paths, a vulnerability allowing SSRF execution was found. The application performs insufficient validation of the destination address before...

PT-2025-10: Server-Side Request Forgery (SSRF) in HTML2PDF

The application performs insufficient validation of the destination address before sending an HTTP request. The vulnerability exploitation leads to the disclosure of sensitive data, denial of service, and etc. Vulnerability status: Confirmed by vendor Date of vulnerability remediation: 25.04.2025...

WordPress ShopLentor plugin <= 3.1.2 - Unauthenticated Server-Side Request Forgery via URL Parameter vulnerability

Unauthenticated Server-Side Request Forgery via URL Parameter vulnerability discovered by mikemyers in WordPress Plugin ShopLentor versions = 3.1.2...

Security Bulletin: IBM WebSphere Application Server is vulnerable to server-side request forgery (CVE-2025-27907)

Summary IBM WebSphere Application Server is vulnerable to server-side request forgery. Vulnerability Details CVEID:CVE-2025-27907 DESCRIPTION: IBM WebSphere Application Server is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests...

WordPress WP AVCL Automation Helper (formerly WPFlyLeads) plugin <= 3.4 - Server Side Request Forgery (SSRF) Vulnerability

Server Side Request Forgery SSRF Vulnerability discovered by ch4r0n in WordPress Plugin WP AVCL Automation Helper formerly WPFlyLeads versions = 3.4...

WordPress BeerXML Shortcode plugin <= 0.7.1 - Server Side Request Forgery (SSRF) Vulnerability

Server Side Request Forgery SSRF Vulnerability discovered by ch4r0n in WordPress Plugin BeerXML Shortcode versions = 0.7.1...

WordPress Simple Google Photos Grid plugin <= 1.5 - Server Side Request Forgery (SSRF) Vulnerability

Server Side Request Forgery SSRF Vulnerability discovered by ch4r0n in WordPress Plugin Simple Google Photos Grid versions = 1.5...

WordPress Animate plugin <= 0.5 - Server Side Request Forgery (SSRF) Vulnerability

Server Side Request Forgery SSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Animate versions = 0.5...

CVE-2025-46531

Server-Side Request Forgery SSRF vulnerability in Ankur Vishwakarma WP AVCL Automation Helper formerly WPFlyLeads woozap allows Server Side Request Forgery.This issue affects WP AVCL Automation Helper formerly WPFlyLeads: from n/a through = 3.4...

CVE-2025-46511

Server-Side Request Forgery SSRF vulnerability in Derek Springer BeerXML Shortcode beerxml-shortcode allows Server Side Request Forgery.This issue affects BeerXML Shortcode: from n/a through = 0.7.1...

CVE-2025-46503

Server-Side Request Forgery SSRF vulnerability in josheli Simple Google Photos Grid simple-google-photos-grid allows Server Side Request Forgery.This issue affects Simple Google Photos Grid: from n/a through = 1.5...

CVE-2025-46443

Server-Side Request Forgery SSRF vulnerability in Adam Pery Animate animate allows Server Side Request Forgery.This issue affects Animate: from n/a through = 0.5...

CVE-2025-46531 WordPress WP AVCL Automation Helper (formerly WPFlyLeads) plugin <= 3.4 - Server Side Request Forgery (SSRF) Vulnerability

Server-Side Request Forgery SSRF vulnerability in Ankur Vishwakarma WP AVCL Automation Helper formerly WPFlyLeads woozap allows Server Side Request Forgery.This issue affects WP AVCL Automation Helper formerly WPFlyLeads: from n/a through = 3.4...

CVE-2025-46531 WordPress WP AVCL Automation Helper (formerly WPFlyLeads) <= 3.4 - Server Side Request Forgery (SSRF) Vulnerability

Server-Side Request Forgery SSRF vulnerability in Ankur Vishwakarma WP AVCL Automation Helper formerly WPFlyLeads allows Server Side Request Forgery. This issue affects WP AVCL Automation Helper formerly WPFlyLeads: from n/a through 3.4...

CVE-2025-46511 WordPress BeerXML Shortcode <= 0.71 - Server Side Request Forgery (SSRF) Vulnerability

Server-Side Request Forgery SSRF vulnerability in Derek Springer BeerXML Shortcode allows Server Side Request Forgery. This issue affects BeerXML Shortcode: from n/a through 0.71...

CVE-2025-46511 WordPress BeerXML Shortcode plugin <= 0.7.1 - Server Side Request Forgery (SSRF) Vulnerability

Server-Side Request Forgery SSRF vulnerability in Derek Springer BeerXML Shortcode beerxml-shortcode allows Server Side Request Forgery.This issue affects BeerXML Shortcode: from n/a through = 0.7.1...

CVE-2025-46511

CVE-2025-46511 corresponds to a SSRF vulnerability in the WordPress BeerXML Shortcode plugin (versions

CVE-2025-46503 WordPress Simple Google Photos Grid plugin <= 1.5 - Server Side Request Forgery (SSRF) Vulnerability

Server-Side Request Forgery SSRF vulnerability in josheli Simple Google Photos Grid simple-google-photos-grid allows Server Side Request Forgery.This issue affects Simple Google Photos Grid: from n/a through = 1.5...

CVE-2025-46503

CVE-2025-46503 is a Server-Side Request Forgery (SSRF) vulnerability in the WordPress plugin Simple Google Photos Grid (josheli) affecting versions ≤ 1.5. The public records describe an SSRF issue but do not disclose attack vectors or exploitation details in the provided documents. CVSS v3.1 base...

CVE-2025-46503 WordPress Simple Google Photos Grid plugin <= 1.5 - Server Side Request Forgery (SSRF) Vulnerability

Server-Side Request Forgery SSRF vulnerability in josheli Simple Google Photos Grid simple-google-photos-grid allows Server Side Request Forgery.This issue affects Simple Google Photos Grid: from n/a through = 1.5...