Blind Server-Side Request Forgery Vulnerability in MxChat Plugin for WordPress

CVE-2025-10705

What is CVE-2025-10705?

The MxChat – AI Chatbot for WordPress plugin has a vulnerability allowing unauthenticated attackers to leverage insufficient validation of user-supplied URLs. This flaw is particularly evident in the PDF processing function, where attackers can manipulate the system to send HTTP requests to arbitrary locations. The vulnerability affects all versions up to and including 2.4.6, necessitating immediate action for site owners to secure their installations and prevent potential exploitation.

References