VYPR

GetContentFromURL

by WordPress

Source repositories

CVEs (1)

  • CVE-2025-14613HigJan 14, 2026
    risk 0.47cvss 7.2epss 0.00

    The GetContentFromURL plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.0. This is due to the plugin using wp_remote_get() instead of wp_safe_remote_get() to fetch content from a user-supplied URL in the 'url' parameter of…