vulnerability

WordPress Plugin: b-slider: CVE-2025-8680: Server-Side Request Forgery (SSRF)

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:S/C:P/I:N/A:N)

Published

Aug 14, 2025

Added

Aug 15, 2025

Modified

Apr 30, 2026

Description

The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Server-Side Request Forgery in version less than, or equal to, 2.0.0 via the fs_api_request function. This makes it possible for authenticated attackers, with subscriber-level access and above to make web requests to arbitrary locations originating from the web application which can be used to query and modify information from internal services.

Solution

b-slider-plugin-cve-2025-8680

References

https://www.cve.org/CVERecord?id=CVE-2025-8680
https://www.wordfence.com/threat-intel/vulnerabilities/id/ac245316-228e-4508-b3fe-f7071fb1bc8e?source=api-prod
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-24961
CVE-2025-8680
https://attackerkb.com/topics/CVE-2025-8680
CWE-918
EUVD-EUVD-2025-24961

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report