CVE-2025-12962 | Local Syndication Plugin up to 1.5a on WordPress Shortcode wp_remote_get url server-side request forgery

November 17, 2025 Yanac

A vulnerability, which was classified as critical, was found in Local Syndication Plugin up to 1.5a on WordPress. This impacts the function wp_remote_get of the component Shortcode Handler. Such manipulation of the argument url leads to server-side request forgery.

This vulnerability is documented as CVE-2025-12962. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More