CVE-2025-12962

The Local Syndication plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.5a via the `url` parameter in the `[syndicate_local]` shortcode. This is due to the use of `wp_remote_get()` instead of `wp_safe_remote_get()` which lacks protections against requests to internal/private IP addresses and localhost. This makes it possible for authenticated attackers, with Contributor-level access and above, to make web requests to arbitrary locations originating from the web application, which can be used to query and modify information from internal services, scan internal networks, and access resources that should not be accessible from external networks.

• CWE-918

• https://plugins.trac.wordpress.org/browser/local-syndication/tags/1.5/local_syndication.php#L41
• https://plugins.trac.wordpress.org/browser/local-syndication/tags/1.5/local_syndication.php#L64
• https://www.wordfence.com/threat-intel/vulnerabilities/id/7774cdfd-622a-4608-9efd-273923a0d0aa?source=cve

Published

Nov 18, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-12956A reflected Cross-site Scripting (XSS) vulnerability affecti…5.4
• CVE-2025-12957The All-in-One Video Gallery plugin for WordPress is vulnera…8.8
• CVE-2025-12958The Rankology SEO and Analytics Tool plugin for WordPress is…2.7
• CVE-2025-1296Nomad Community and Nomad Enterprise (“Nomad”) are vulnerabl…6.5
• CVE-2025-12960The Simple CSV Table plugin for WordPress is vulnerable to D…6.5
• CVE-2025-12961The Download Panel plugin for WordPress is vulnerable to una…4.3
• CVE-2025-12963The LazyTasks – Project & Task Management with Collaboration…9.8
• CVE-2025-12964The Magical Products Display plugin for WordPress is vulnera…6.4
• CVE-2025-12965The Magical Posts Display plugin for WordPress is vulnerable…6.4
• CVE-2025-12966The All-in-One Video Gallery plugin for WordPress is vulnera…8.8
• CVE-2025-12967An issue in AWS Wrappers for Amazon Aurora PostgreSQL may al…8.6
• CVE-2025-12968The Infility Global plugin for WordPress is vulnerable to ar…8.8