PT-2025-41851 · WordPress · Pz-Linkcard

Published 2025-10-14 · Updated 2025-10-14 · CVE-2025-8594

Positive Technologies · (AI Summary)

CVSS v3.1

3.8

3.8

Low

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Pz-LinkCard WordPress plugin versions prior to 2.5.7

Description The software does not properly validate a parameter before using it in a request, potentially allowing Server-Side Request Forgery (SSRF) attacks. Users with Contributor privileges or higher can exploit this issue.

Recommendations Update to version 2.5.7 or later.

Fix

Related Identifiers

CVE-2025-8594

Affected Products

Pz-Linkcard

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-8594 · Security Note
• https://wpscan.com/vulnerability/17104590-d84e-41b7-83ac-9b15fcfb537a · Note
• https://twitter.com/CVEnew/status/1977983506719359302 · Twitter Post