The Burhan Nasir Smart Auto Upload Images plugin version 1.2.2 and earlier contains a Server-Side Request Forgery (SSRF) vulnerability. This flaw allows an attacker with low privileges to coerce the server into making arbitrary requests, which can lead to partial confidentiality and integrity compromise. The vulnerability is rated with a CVSS 3.1 base score of 7.2, reflecting network attack vector, low attack complexity, and no user interaction required. No vendor advisory or patch information is currently available, and the product is not a cloud service.

Successful exploitation of this SSRF vulnerability could allow an attacker to make the affected server perform unintended requests, potentially exposing internal resources or sensitive information, and causing partial loss of confidentiality and integrity. There is no indication of availability impact. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround information is provided, users should monitor for updates from the vendor and apply any official fixes once available. Until then, restricting network access and limiting privileges may reduce risk but are not confirmed mitigations for this specific vulnerability.