Exploitation Summary
CVE-2025-47445 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including inverterad. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository provides a detailed technical walkthrough of exploiting CVE-2025-47445, an SSRF vulnerability in the WordPress Eventin plugin (version 4.0.26 or older). It includes setup instructions, Nuclei scanning results, and manual testing with Burp Suite to demonstrate arbitrary file read via the `proxy_image` action.
Description
Relative Path Traversal vulnerability in Arraytics Eventin wp-event-solution allows Path Traversal.This issue affects Eventin: from n/a through <= 4.0.26.
Exploits (1)
This repository provides a detailed technical walkthrough of exploiting CVE-2025-47445, an SSRF vulnerability in the WordPress Eventin plugin (version 4.0.26 or older). It includes setup instructions, Nuclei scanning results, and manual testing with Burp Suite to demonstrate arbitrary file read via the `proxy_image` action.
Nuclei Templates (1)
html:"wp-event-solution"
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N