This vulnerability in the HETWORKS WordPress Image shrinker plugin (versions ≤ 1.1.0) allows an attacker with low privileges to perform Server-Side Request Forgery (SSRF). SSRF vulnerabilities enable attackers to make the server send crafted requests to internal or external systems, potentially exposing sensitive information or manipulating data. The CVSS vector indicates the attack requires network access, has high attack complexity, low privileges, no user interaction, and impacts confidentiality and integrity partially without affecting availability.

An attacker with low privileges can exploit this SSRF vulnerability to cause the server to make unauthorized requests, potentially leading to partial disclosure of sensitive information and partial modification of data. There is no indication of availability impact. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, consider restricting plugin usage or limiting network access from the server to reduce potential SSRF impact.