Threats tagged 'ghsa-rjf9-fxg3-f244'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.4	EPSS 0.2%	CVE-2025-12388The B Carousel Block – Responsive Image and Content Carousel plugin for WordPress is vulnerable to Server-Side Request Medium6.4EPSS 0.2%2025-11-05GCVE DatabaseCVE-2025-12388 The B Carousel Block plugin for WordPress versions up to and including 1.1.5 is vulnerable to a Server-Side Request Forgery (SSRF) flaw. This vulnerability arises because the plugin does not validate user-supplied URLs before passing them to the wp_remote_request() function. Authenticated users with subscriber-level access or higher can exploit this to make arbitrary web requests from the server, potentially querying or modifying internal services. EPSS 0.2%Report on CVE-2025-12388 Vulnerability CWE-918 #ghsa-rjf9-fxg3-f244	GCVE Database	2025-11-05

Page 1 of 1