The vulnerability CVE-2025-46503 in the Simple Google Photos Grid plugin by josheli is a Server-Side Request Forgery (SSRF) issue present in versions up to 1.5. SSRF vulnerabilities enable an attacker to make the server perform unauthorized requests, which can lead to information disclosure or manipulation of data. The CVSS vector indicates the attack requires network access, high attack complexity, low privileges, no user interaction, and impacts confidentiality and integrity with no availability impact. No patch or official remediation details are provided in the available data.

An attacker with low privileges can exploit this SSRF vulnerability to cause the server to send crafted requests, potentially exposing sensitive information or modifying data. The impact is limited to confidentiality and integrity with no availability impact. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should monitor vendor communications for updates. No specific mitigations are provided in the available data.