Medium · 4.9 CVE-2025-47483 EUVD-2025-13838GHSA-p9f7-3xg3-4mr6

WordPress Easy Replace Image plugin <= 3.5.0 - Server Side Request Forgery (SSRF) Vulnerability

Published May 7, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Iulia Cazan Product: Easy Replace Image

Description

Server-Side Request Forgery (SSRF) vulnerability in Iulia Cazan Easy Replace Image easy-replace-image allows Server Side Request Forgery.This issue affects Easy Replace Image: from n/a through <= 3.5.0.

Affected products

Vendor	Product	Affected	Fixed
Iulia Cazan	Easy Replace Image	≤ 3.5.0	—

References

https://patchstack.com/database/Wordpress/Plugin/easy-replace-image/vulnerability/wordpress-easy-replace-image-3-5-0-server-side-request-forgery-ssrf-vulnerability?_s_id=cve vdb-entry