cleantalk
Vulnerabilities and Security Researches

Auto Upload Images, CVE-2025-49985

CVE, Research URL

CVE-2025-49985

Home page URL

Security reports for Auto Upload Images

Application

Auto Upload Images

Published on
Jun 20, 2025
Research Description
Server-Side Request Forgery (SSRF) vulnerability in Ali Irani Auto Upload Images allows Server Side Request Forgery. This issue affects Auto Upload Images: from n/a through 3.3.2.
Affected versions
Min -, max 3.3.2.
Status
vulnerable
Previous vulnerability researches
Panda Pods Repeater Field (CVE-2022-4306) , Jun 06, 2024
Pods – Custom Content Types and Fields (CVE-2024-11849) , Jan 07, 2025
Pods – Custom Content Types and Fields (CVE-2025-1446) , May 08, 2025
Pods – Custom Content Types and Fields (CVE-2014-7956) , Jun 07, 2024
Pods – Custom Content Types and Fields (CVE-2023-6999) , Jun 07, 2024
New vulnerability
VikRentCar Car Rental Management System (CVE-2025-5322) , Jul 04, 2025
GoZen Forms (CVE-2025-6783) , Jul 04, 2025
GoZen Forms (CVE-2025-6782) , Jul 04, 2025
CSV Importer Improved (CVE-2025-50013) , Jul 04, 2025
WooCommerce PDF Invoice Builder, Create invoices, packing slips and more (CVE-2025-53203) , Jul 04, 2025