CVE-2025-47548 – WordPress Wbcom Designs - Activity Link Preview For BuddyPress <= 1.4.4 - Server Side Request Forgery (SSRF) Vulnerability

https://notcve.org/view.php?id=CVE-2025-47548

07 May 2025 — Server-Side Request Forgery (SSRF) vulnerability in Varun Dubey Wbcom Designs - Activity Link Preview For BuddyPress allows Server Side Request Forgery. This issue affects Wbcom Designs - Activity Link Preview For BuddyPress: from n/a through 1.4.4. The Wbcom Designs – Activity Link Preview For BuddyPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.4.4. This makes it possible for unauthenticated attackers to make web requests to arbitrary locatio... • https://patchstack.com/database/wordpress/plugin/activity-link-preview-for-buddypress/vulnerability/wordpress-wbcom-designs-activity-link-preview-for-buddypress-1-4-4-server-side-request-forgery-ssrf-vulnerability?_s_id=cve • CWE-918: Server-Side Request Forgery (SSRF) •