The Zapier for WordPress plugin contains an SSRF vulnerability (CWE-918) in the updated_user() function present in all versions up to 1.5.1. This vulnerability allows authenticated users with at least Subscriber privileges to induce the application to send crafted web requests to arbitrary locations. Such requests originate from the server hosting the WordPress site, potentially enabling attackers to interact with internal network services or other unintended targets. The CVSS 3.1 base score is 6.4 (medium), reflecting network attack vector, low attack complexity, low privileges required, no user interaction, and partial confidentiality and integrity impact.

An attacker with authenticated access at Subscriber level or above can exploit this SSRF vulnerability to make arbitrary HTTP requests from the vulnerable WordPress server. This can lead to unauthorized querying and modification of internal services accessible from the server, potentially exposing sensitive information or enabling further attacks within the internal network. There is no indication of impact to availability. No known exploits in the wild have been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict user roles to trusted individuals only and monitor for suspicious activity involving the Zapier for WordPress plugin. Avoid granting Subscriber-level or higher access to untrusted users. Follow vendor communications for updates on patches or official mitigations.