The vulnerability identified as CVE-2025-57984 is a Server-Side Request Forgery (SSRF) issue in the MakeStories (for Google Web Stories) plugin, specifically in the makestories-helper component. It affects all versions up to 3.0.4. SSRF vulnerabilities allow an attacker to make the server perform HTTP requests to arbitrary domains, which can lead to information disclosure or manipulation of internal services. The CVSS vector indicates that exploitation requires network access, high attack complexity, and high privileges, with no user interaction needed. The impact includes limited confidentiality and integrity loss but no availability impact. There is no vendor advisory or patch link provided, and no known active exploitation has been reported.

An attacker with high privileges on the affected system can exploit this SSRF vulnerability to make the server send crafted requests to internal or external systems. This could lead to limited confidentiality and integrity impacts, such as unauthorized information disclosure or modification of data accessible via these requests. There is no indication of availability impact or widespread exploitation at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix is currently referenced, users should monitor the vendor's communications for updates. Given the high privilege requirement for exploitation, restricting administrative access and reviewing plugin usage may reduce risk until a fix is available.