CVE-2022-1037: Villatheme Exmage

High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days.

The EXMAGE WordPress plugin before 1.0.7 does to ensure that images added via URLs are external images, which could lead to a blind SSRF issue by using local URLs

Affected products

• Villatheme Exmage: before 1.0.7 (fixed in 1.0.7)

Published 2022-04-18. Last modified 2026-06-17.