The Gutenverse WordPress plugin contains an SSRF vulnerability (CWE-918) in the import_images() function, which allows authenticated users with contributor or higher privileges to cause the server to make arbitrary HTTP requests. This can lead to unauthorized access or modification of internal services accessible from the server. The vulnerability affects all versions up to 3.5.3. No official fix or patch has been published yet, and no known active exploitation has been reported.

An attacker with contributor-level or higher access can exploit this SSRF vulnerability to make the server perform arbitrary web requests. This may allow the attacker to access or modify internal services that are not directly accessible externally, potentially leading to information disclosure or unauthorized actions within the internal network. The impact is limited by the requirement for authenticated access with contributor privileges or above.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict contributor-level access to trusted users only and monitor for suspicious activity related to the import_images() function. Avoid exposing internal services that could be targeted via SSRF from the WordPress server.