Server-Side Request Forgery Vulnerability in B Slider Plugin for WordPress

CVE-2025-8680

What is CVE-2025-8680?

The B Slider Gutenberg Slider Block for WordPress plugin is susceptible to Server-Side Request Forgery (SSRF) due to a flaw in the fs_api_request function. This vulnerability allows authenticated users with subscriber-level access and above to initiate external web requests from the web application. An attacker could exploit this to interact with and potentially compromise internal services by sending unauthorized requests, posing a significant threat to the integrity and confidentiality of the system.

References