The User Language Switch plugin for WordPress contains an SSRF vulnerability (CWE-918) due to lack of URL validation in the 'download_language()' function. This allows authenticated administrators to induce the server to send crafted HTTP requests to arbitrary locations, potentially accessing or altering internal network resources. The issue affects all plugin versions up to and including 1.6.10. The CVSS 3.1 base score is 5.5, reflecting network attack vector, low attack complexity, high privileges required, no user interaction, and partial confidentiality and integrity impact. No patch or vendor advisory is provided to confirm remediation status.

An attacker with Administrator-level access can exploit this SSRF vulnerability to make the server perform arbitrary HTTP requests. This can lead to unauthorized querying or modification of internal services accessible from the server, potentially exposing sensitive information or enabling further attacks within the internal network. The impact is limited by the requirement for high privileges (Administrator access) and does not affect availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict Administrator-level access to trusted users only and monitor for suspicious activity related to the User Language Switch plugin. Avoid exposing internal services that could be targeted via SSRF. Do not rely on generic mitigations without vendor confirmation.