Server-Side Request Forgery Vulnerability in Wbcom Designs - Activity Link Preview for BuddyPress
CVE-2025-47548

9.8CRITICAL

Key Information:

Vendor

WordPress
Status
Wbcom Designs - Activity Link Preview For Buddypress
Vendor
CVE Published:
7 May 2025

What is CVE-2025-47548?

A Server-Side Request Forgery (SSRF) vulnerability has been identified in the Wbcom Designs Activity Link Preview for BuddyPress plugin. This flaw enables attackers to manipulate the server to perform unauthorized requests potentially leading to exposure of sensitive information or internal resources. The vulnerability can be exploited by sending crafted requests to the server, which could result in unintended access and data leakage.

Affected Version(s)

Wbcom Designs - Activity Link Preview For BuddyPress <= 1.4.4

References

https://patchstack.com/database/wordpress/plugin/activity...
vdb-entry

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

HLog (Patchstack Alliance)
.