This vulnerability (CVE-2025-47664) is a Server-Side Request Forgery (SSRF) issue in the WP Pipes plugin by ThimPress, affecting versions through 1.4.2. SSRF vulnerabilities allow attackers to make the server perform unauthorized requests, potentially accessing internal resources or services. The CVSS 3.1 vector indicates the attack requires network access, high privileges, no user interaction, and has a scope change with limited confidentiality and integrity impacts. No patch or remediation information is currently available from the vendor or other sources.

An attacker with high privileges on the affected system can exploit this SSRF vulnerability to cause the server to send crafted requests to internal or external systems. This may lead to limited confidentiality and integrity impacts, such as unauthorized data access or modification. There is no impact on availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict high-privilege user access to trusted personnel only and monitor for suspicious activity related to server requests initiated by the WP Pipes plugin. Avoid exposing internal services that could be targeted via SSRF.