Server-Side Request Forgery Vulnerability in Beaf Plugin by Binsaifullah
CVE-2025-53461

4.4MEDIUM

Key Information:

Vendor

WordPress
Status
Beaf
Vendor
CVE Published:
22 September 2025

What is CVE-2025-53461?

A Server-Side Request Forgery (SSRF) vulnerability has been identified in the Beaf plugin developed by Binsaifullah. This flaw allows attackers to send unauthorized requests from the server, potentially leading to data exposure or manipulation of internal services. Affected versions are from an unspecified version up to 1.6.2. It is crucial for users of the Beaf plugin to take immediate action to secure their installations and patch this vulnerability to maintain the integrity of their web applications.

Affected Version(s)

Beaf <= 1.6.2

References

https://patchstack.com/database/wordpress/plugin/image-co...
vdb-entry

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nabil Irawan (Patchstack Alliance)
JSON
.
CVE-2025-53461 : Server-Side Request Forgery Vulnerability in Beaf Plugin by Binsaifullah