Server-Side Request Forgery Vulnerability in Wbcom Designs - Activity Link Preview for BuddyPress
CVE-2025-47548

5.4MEDIUM

Key Information:

Vendor

WordPress
Status
Wbcom Designs - Activity Link Preview For Buddypress
Vendor
CVE Published:
7 May 2025

What is CVE-2025-47548?

A Server-Side Request Forgery (SSRF) vulnerability has been identified in the Wbcom Designs Activity Link Preview for BuddyPress plugin. This flaw enables attackers to manipulate the server to perform unauthorized requests potentially leading to exposure of sensitive information or internal resources. The vulnerability can be exploited by sending crafted requests to the server, which could result in unintended access and data leakage.

Affected Version(s)

Wbcom Designs - Activity Link Preview For BuddyPress 0 <= 1.4.4

References

https://patchstack.com/database/Wordpress/Plugin/activity...
vdb-entry

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

HLog (Patchstack Alliance)
.