Server-Side Request Forgery Vulnerability in WP eBay Product Feeds by Rhys Wynne

CVE-2025-58977

What is CVE-2025-58977?

A Server-Side Request Forgery (SSRF) vulnerability has been identified in the WP eBay Product Feeds plugin developed by Rhys Wynne. This issue allows an attacker to send unauthorized requests from the server, potentially leading to exposure of sensitive information or interaction with internal services that should not be accessible externally. The vulnerability affects all versions of the plugin up to 3.4.8. It’s crucial for users to evaluate their installations and implement updates to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References