apprhyme

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

apprhyme records in CISA KEV

No apprhyme vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Url Media Uploader 1 record LOW

Records

1 record in Url Media Uploader · all components

TI-2025-01428 CVE-2025-1662 · GHSA-qwj2-2fwc-g58h

URL Media Uploader <= 1.0.0 - Authenticated (Author+) Server-Side Request Forgery via DNS Rebinding

LOW 28

The URL Media Uploader plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.0.0 via the 'url_media_uploader_url_upload' action.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00286 Published 2025-02-28 No fix listed CWE-918

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0