Server-Side Request Forgery in Exit Intent Popup by kamleshyadav
CVE-2025-58641

5.4MEDIUM

Key Information:

Vendor

WordPress
Status
Exit Intent Popup
Vendor
CVE Published:
3 September 2025

What is CVE-2025-58641?

The Exit Intent Popup plugin by kamleshyadav contains a vulnerability that allows attackers to exploit Server-Side Request Forgery (SSRF). This flaw can potentially enable unauthorized access to internal resources, posing a significant risk to users of the plugin. The vulnerability affects versions from its initial release through 1.0.1, highlighting the need for immediate attention and updates to safeguard against potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Exit Intent Popup <= 1.0.1

References

https://patchstack.com/database/wordpress/plugin/exitinte...
vdb-entry

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Tran Nguyen Bao Khanh (VCI - VNPT Cyber Immunity) (Patchstack Alliance)
JSON
.