Server-Side Request Forgery Vulnerability in Wombat Plugins WP Optin Wheel
CVE-2025-31824

5.4MEDIUM

Key Information:

Vendor

WordPress
Status
WP Optin Wheel
Vendor
CVE Published:
1 April 2025

What is CVE-2025-31824?

A server-side request forgery (SSRF) vulnerability in Wombat Plugins WP Optin Wheel allows attackers to manipulate server requests, potentially exposing sensitive data or causing unintended actions on behalf of the server. This flaw affects versions from n/a to 1.4.7, making it crucial for users to update and secure their installations to mitigate risks.

Affected Version(s)

WP Optin Wheel <= 1.4.7

References

https://patchstack.com/database/wordpress/plugin/wp-optin...
vdb-entry

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Marek Mikita (Patchstack Alliance)
.