CVE-2025-49983

WPThumb for WordPress is affected by CVE-2025-49983: a Server-Side Request Forgery (SSRF) vulnerability in WPThumb versions 0.10 and earlier. The vulnerability causes SSRF, with a CVSS v3.1 base score of 4.9 (Medium) and network access requiring low privileges with no user interaction. Exploitati...