CVE-2025-13174 in WeRSS we-mp-rss
Sumário
de MITRE • 14/11/2025
A weakness has been identified in rachelos WeRSS we-mp-rss up to 1.4.7. Affected by this vulnerability is the function do_job of the file /rachelos/we-mp-rss/blob/main/jobs/mps.py of the component Webhook Module. Executing manipulation of the argument web_hook_url can lead to server-side request forgery. The attack may be launched remotely. The exploit has been made available to the public and could be exploited.
VulDB is the best source for vulnerability data and more expert information about this specific topic.