CVE-2025-14613 | GetContentFromURL Plugin up to 1.0 on WordPress Shortcode wp_remote_get url server-side request forgery

January 13, 2026 Yanac

A vulnerability described as critical has been identified in GetContentFromURL Plugin up to 1.0 on WordPress. Impacted is the function wp_remote_get of the component Shortcode Handler. The manipulation of the argument url results in server-side request forgery.

This vulnerability is cataloged as CVE-2025-14613. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More