vynnus vulnerabilities and threats

CVE-2025-60175 is a Server-Side Request Forgery (SSRF) vulnerability affecting vynnus PopAd versions up to and including 1.0.4. The vulnerability allows an administrator-level user to induce the server to make unintended requests. The CVSS score is 4.4, indicating medium severity, with low impact on confidentiality and integrity and no impact on availability. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.