PT-2025-38997 · Unknown · Binsaifullah Beaf

Nabil Irawan · CVE-2025-53461 · Published 2025-09-22 · Updated 2025-09-22

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Binsaifullah Beaf versions through 1.6.2

Description A Server-Side Request Forgery (SSRF) issue exists in Binsaifullah Beaf. This allows for Server Side Request Forgery. The issue impacts the application's ability to properly validate server requests, potentially allowing an attacker to make the server perform actions on their behalf.

Recommendations Update Binsaifullah Beaf to a version later than 1.6.2.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2025-53461

Affected Products

Binsaifullah Beaf

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-53461 · Security Note
• https://patchstack.com/database/wordpress/plugin/image-compare-block/vulnerability/wordpress-beaf-plugin-1-6-2-server-side-request-forgery-ssrf-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1970207983130071519 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/image-compare-block/vulnerability/wordpress-beaf-plugin-1-6-2-server-side-request-forgery-ssrf-vulnerability?_s_id=cve · Note