This vulnerability in ThemeREX Addons (versions >=0 and <2.47.0) allows an attacker with low privileges to perform SSRF attacks. SSRF can enable attackers to make the server send crafted requests to internal or external systems, potentially exposing sensitive information or interacting with internal services. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, scope changed, and partial confidentiality and integrity impacts.

An attacker with low privileges can exploit this SSRF vulnerability to make the server send unauthorized requests, potentially leading to information disclosure and integrity issues. There is no indication of availability impact. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or fix links are provided in the available data. Users should monitor ThemeREX Group advisories for updates and apply any official patches once released.