CVE-2025-2109
CVSS 3.1 Score 4.9 of 10 (medium)
Details
Published Mar 25, 2025
Updated: Mar 27, 2025
CWE ID 22
Summary
CVE-2025-2109 is a Server-Side Request Forgery (SSRF) vulnerability affecting the WP Compress plugin for WordPress, versions up to 6.30.15. Unauthenticated attackers can exploit this issue through the init() function, enabling them to make web requests from the vulnerable application to any desired location. By leveraging this flaw, attackers can potentially gain access to sensitive information from internal services.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.