Skip to content
OpenAdvisories
Medium · 5.4 CVE-2025-47548 EUVD-2025-13788GHSA-cpjv-5wwh-mwg5

WordPress Wbcom Designs - Activity Link Preview For BuddyPress plugin <= 1.4.4 - Server Side Request Forgery (SSRF) Vulnerability

Published May 7, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Server-Side Request Forgery (SSRF) vulnerability in Varun Dubey Wbcom Designs - Activity Link Preview For BuddyPress activity-link-preview-for-buddypress allows Server Side Request Forgery.This issue affects Wbcom Designs - Activity Link Preview For BuddyPress: from n/a through <= 1.4.4.

Affected products

VendorProductAffectedFixed
Varun Dubey Wbcom Designs - Activity Link Preview For BuddyPress ≤ 1.4.4 —

References