CVE-2025-49984 is a Server-Side Request Forgery (SSRF) vulnerability affecting blubrry PowerPress Podcasting versions up to 11.13.11. SSRF vulnerabilities allow an attacker to make the server perform unauthorized requests, potentially accessing internal resources or services. The CVSS 3.1 base score is 4.9, reflecting a medium severity with network attack vector, high attack complexity, low privileges required, no user interaction, and partial impact on confidentiality and integrity but no impact on availability. There is no vendor advisory or patch information currently available.

An attacker with low privileges can exploit this SSRF vulnerability to cause the server to make unintended network requests. This may lead to partial disclosure of information and partial modification of data on the server or internal network. There is no indication of availability impact or known exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the vulnerable plugin and monitor for unusual server behavior related to outbound requests. Avoid exposing the affected service to untrusted users if possible.