{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-30T11:51:09.745","vulnerabilities":[{"cve":{"id":"CVE-2025-8680","sourceIdentifier":"security@wordfence.com","published":"2025-08-15T03:15:37.260","lastModified":"2026-06-17T10:07:25.857","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Server-Side Request Forgery in version less than, or equal to, 2.0.0 via the fs_api_request function. This makes it possible for authenticated attackers, with subscriber-level access and above to make web requests to arbitrary locations originating from the web application which can be used to query and modify information from internal services."},{"lang":"es","value":"El complemento B Slider - Gutenberg Slider Block for WP para WordPress es vulnerable a Server-Side Request Forgery en versiones anteriores o iguales a la 2.0.0 mediante la función fs_api_request. Esto permite a atacantes autenticados, con acceso de suscriptor o superior, realizar solicitudes web a ubicaciones arbitrarias desde la aplicación web, las cuales pueden utilizarse para consultar y modificar información de servicios internos."}],"affected":[{"source":"security@wordfence.com","affectedData":[{"vendor":"bplugins","product":"bSlider – Create Responsive Image, Post, Product, and Video Sliders","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"2.0.0","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security@wordfence.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-08-15T12:43:28.009741Z","id":"CVE-2025-8680","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security@wordfence.com","type":"Secondary","description":[{"lang":"en","value":"CWE-918"}]}],"references":[{"url":"https://plugins.trac.wordpress.org/browser/b-slider/tags/1.1.30/bplugins_sdk/inc/Base/FSActivate.php#L166","source":"security@wordfence.com"},{"url":"https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3343487%40b-slider&new=3343487%40b-slider&sfp_email=&sfph_mail=","source":"security@wordfence.com"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ac245316-228e-4508-b3fe-f7071fb1bc8e?source=cve","source":"security@wordfence.com"}]}}]}