low3.8
CVE-2025-8594
The Pz-LinkCard WordPress plugin before 2.5.7 does not validate a parameter before making a request to it, which could allow users with a role as low as Contri…
Impact
The Pz-LinkCard WordPress plugin before 2.5.7 does not validate a parameter before making a request to it, which could allow users with a role as low as Contributor to perform SSRF attack.
Affected products
| Product | Affected versions |
|---|---|
| Pz-LinkCard WordPress Plugin | before 2.5.7 |
Versions were read from the advisory text. No structured product data has been published for this record yet.