ThemesInflow Hercules Core Server-Side Request Forgery Vulnerability
Vulnerability
A Server-Side Request Forgery (SSRF) vulnerability exists in the ThemesInflow Hercules Core plugin, specifically in versions through 7.4. This vulnerability allows attackers to send crafted requests from the server, potentially leading to unauthorized access or manipulation of internal resources.
Impact
Exploitation of this vulnerability allows for Server-Side Request Forgery, where an attacker can make the server perform requests on their behalf. This could be used to access internal services or resources that are not normally exposed to the outside world.
Added: Dec 9, 2025, 6:57 PM
Updated: Dec 9, 2025, 6:57 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
7.4remediation
0.0relevance
1.4threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.