The vulnerability CVE-2025-47483 is a Server-Side Request Forgery (SSRF) issue in the Easy Replace Image plugin by Iulia Cazan, affecting versions up to 3.5.0. SSRF vulnerabilities allow an attacker to make the server perform unintended HTTP requests, potentially accessing internal resources or services. The CVSS 3.1 vector indicates the attack requires network access, high attack complexity, low privileges, no user interaction, and impacts confidentiality and integrity with no impact on availability. No patch or vendor advisory is currently available to confirm remediation status.

An attacker with low privileges can exploit this SSRF vulnerability to cause the server to send crafted HTTP requests, potentially leading to unauthorized information disclosure or manipulation of data. The impact is limited to confidentiality and integrity with no reported effect on availability. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access and monitor for suspicious activity related to the plugin. Avoid exposing the vulnerable plugin to untrusted users or networks where possible.