CVEvulnerability

CVE-2025-11970

4.4 MEDIUM Published 2025-12-13 Modified 2026-10-07 Official page ↗

Status: Deferred
Published: 2025-12-13
Last modified: 2026-10-07
Assigner: [email protected]
CVSS 3.1 ([email protected]): 4.4 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Weaknesses: CWE-918

Description

The Emplibot – AI Content Writer with Keyword Research, Infographics, and Linking | SEO Optimized | Fully Automated plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.0.9 via the emplibot_call_webhook_with_error() and emplibot_process_zip_data() functions. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.

Weakness · CWE (1)

CWE-918 Server-Side Request Forgery weakness

References

https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3398720%40emplibot&new=3398720%40emplibot&sfp_email=&sfph_mail= plugins.trac.wordpress.org
https://www.wordfence.com/threat-intel/vulnerabilities/id/095c6359-112d-4abc-a69b-a623dfd103c0?source=cve www.wordfence.com

CVE-2025-11970

Description

Related

Weakness · CWE (1)

References