CVE-2025-47635: Medium SSRF in WebinarPress
CVE-2025-47635 is a medium severity SSRF in the WebinarPress plugin that needs an admin login. Update to 1.33.31 or later, listed as fixed by Patchstack.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
CVE-2025-47635 is a medium severity SSRF in the WebinarPress plugin that needs an admin login. Update to 1.33.31 or later, listed as fixed by Patchstack.
CVE-2025-4761 is a high severity SQL injection in PHPGurukul Complaint Management System 2.0, admin profile page. No fix is confirmed, so limit exposure.
CVE-2025-47580 is a medium severity missing authorization flaw in Front End Users through 3.2.35. No official patch is listed, so check or replace it.
CVE-2025-4758 is a high severity SQL injection in the PHPGurukul Beauty Parlour system 1.1 contact page. No fix is confirmed, so limit exposure now.
CVE-2025-4757 is a high severity SQL injection in the PHPGurukul Beauty Parlour system 1.1 forgot password page. No fix is confirmed, so limit exposure.
CVE-2025-47548 is a medium severity SSRF in Activity Link Preview For BuddyPress through 1.4.4. Update to 1.6.0 or later, or remove the plugin.
CVE-2025-47479 is a medium severity weak authentication flaw in the WP Compress image optimizer through 6.30.30. Update to 6.30.31 or later.
CVE-2025-4746 is a high severity SQL injection in Campcodes Sales and Inventory System 1.0. No fix is confirmed, so restrict access and fix the query.
CVE-2025-47453 is a high severity local file inclusion in the WP Smart Import plugin through 1.1.3. Update to 1.1.4 or later, or remove the plugin.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.