CVE-2025-52713 describes a Server-Side Request Forgery vulnerability in the BoldGrid Post and Page Builder plugin, versions up to 1.27.8. The vulnerability allows an attacker with low privileges to cause the server to make unintended requests, potentially exposing or altering data. The CVSS 3.1 base score is 6.4, reflecting network attack vector, low attack complexity, required privileges, no user interaction, and partial confidentiality and integrity impacts. No official patch or vendor advisory information is available in the provided data, and no known exploitation has been reported.

An attacker with low privileges can exploit this SSRF vulnerability to make the server perform unauthorized requests, which could lead to partial disclosure of sensitive information and partial modification of data. There is no indication of availability impact. The medium severity score reflects these partial confidentiality and integrity impacts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround information is provided, users should monitor the vendor's communications for updates. Until a fix is available, restrict plugin access to trusted users and limit network access where possible to reduce risk.