The vulnerability CVE-2025-22672 involves Server-Side Request Forgery in the SuitePlugins Video & Photo Gallery for Ultimate Member plugin, versions up to 1.1.2. SSRF vulnerabilities enable attackers to make the server perform unintended requests, potentially accessing internal systems or sensitive information. The CVSS vector indicates the attack requires network access, high attack complexity, low privileges, no user interaction, and impacts confidentiality and integrity to a limited extent without affecting availability. No patch or official fix information is currently available.

An attacker with low privileges can exploit this SSRF vulnerability to cause the affected server to send unauthorized requests, potentially leading to limited confidentiality and integrity impacts. There is no evidence of availability impact or active exploitation in the wild. The overall severity is medium based on the CVSS score of 4.9.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is released, users should monitor vendor communications for updates. No specific mitigations or workarounds are currently documented.