nK Themes Helper <= 1.7.9 - Authenticated (Subscriber+) Server-Side Request Forgery
medium
The nK Themes Helper plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.7.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application which can be us...
- CVSS:
- 6.4
- Affected:
- up to 1.7.9
- Fix:
- No patched version reported
- Disclosed:
- Jan 8, 2026
CVE-2025-22726 on NVD →
nK Themes Helper [nk-themes-helper] <= 1.7.9 (unfixed)
unknown
[en] Server-Side Request Forgery (SSRF) vulnerability in _nK nK Themes Helper nk-themes-helper allows Server Side Request Forgery.This issue affects nK Themes Helper: from n/a through <= 1.7.9.
- Affected:
- up to 1.7.9
- Fix:
- No patched version reported
- Disclosed:
- Jan 8, 2026
CVE-2025-22726 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database