WordPress security by component

Local Syndication

Plugin description

Local Syndication is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Nov 18, 2025; the highest CVE/CNA score is 6.4.

Plugin slug: local-syndication

Latest vulnerability

CVE-2025-12962: Local Syndication: Server-side request forgery

Local Syndication is affected by server-side request forgery. Exploitation requires at least contributor-level access. The vulnerable server can be induced to make attacker-selected network requests.

PublishedNov 18, 2025

Safe version guidanceSee mitigation notes

		Safe version
Nov 18, 2025	CVE-2025-12962 Local Syndication: Server-side request forgery Local Syndication is affected by server-side request forgery. Exploitation requires at least contributor-level access. The vulnerable server can be induced to make attacker-selected network requests.	See mitigation notes	CVE6.4 NVDPending