Server-Side Request Forgery Vulnerability in Snow Monkey Theme by WordPress

CVE-2025-10137

What is CVE-2025-10137?

The Snow Monkey theme for WordPress is susceptible to a Server-Side Request Forgery (SSRF) flaw that affects all versions up to and including 29.1.5. This vulnerability arises from the request() function, which allows unauthenticated attackers to send web requests to arbitrary locations directly from the web application. This capability can potentially be exploited to access and manipulate sensitive information from internal services.

References