cleantalk
Vulnerabilities and Security Researches

WPThumb, CVE-2025-49983

CVE, Research URL

CVE-2025-49983

Home page URL

Security reports for WPThumb

Application

WPThumb

Published on
Jun 20, 2025
Research Description
Server-Side Request Forgery (SSRF) vulnerability in Joe Hoyle WPThumb allows Server Side Request Forgery. This issue affects WPThumb: from n/a through 0.10.
Affected versions
Min -, max 0.10.
Status
vulnerable
Previous vulnerability researches
Uncanny Automator – Automate everything with the #1 automation, integration & webhooks plugin (CVE-2025-4520) , May 15, 2025
Uncanny Automator – Automate everything with the #1 automation, integration & webhooks plugin (CVE-2025-3623) , May 15, 2025
Uncanny Automator – Automate everything with the #1 automation, integration & webhooks plugin (CVE-2024-13838) , Mar 13, 2025
Uncanny Automator – Automate everything with the #1 automation, integration & webhooks plugin (e060b6e6560d3deb2199fbf637f94070cdbca4af) , Jun 07, 2024
Uncanny Automator – Automate everything with the #1 automation, integration & webhooks plugin (CVE-2023-52151) , Jun 07, 2024
New vulnerability
WPThumb (CVE-2025-49983) , Jun 23, 2025
TinyNav (CVE-2025-52781) , Jun 23, 2025
WP Register Profile With Shortcode (CVE-2025-50042) , Jun 22, 2025
WP Customer Area (CVE-2025-49982) , Jun 22, 2025
Polls CP (CVE-2025-50025) , Jun 22, 2025