CVE-2025-59138

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

Server-Side Request Forgery (SSRF) vulnerability in Jthemes Genemy genemy allows Server Side Request Forgery.This issue affects Genemy: from n/a through <= 1.6.6.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-918

Affected software

Vendor	Product	Versions
Jthemes	Genemy	<= 1.6.6

References

https://patchstack.com/database/Wordpress/Theme/genemy/vulnerability/wordpress-genemy-theme-1-6-6-server-side-request-forgery-ssrf-vulnerability?_s_id=cve

Timeline

Published: Dec 31, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-591395.3Hono is a Web application framework that provides support for any JavaScript runtime. In versions prior to 4.9.7, a flaw in the `bodyLimit` CVE-2025-59147.8A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This fl CVE-2025-591408.8backlash parses collected strings with escapes. On 8 September 2025, the npm publishing account for backslash was taken over after a phishin CVE-2025-591418.8simple-swizzle swizzles function arguments. On 8 September 2025, the npm publishing account for simple-swizzle was taken over after a phishi CVE-2025-591428.8color-string is a parser and generator for CSS color strings. On 8 September 2025, the npm publishing account for color-string was taken ove CVE-2025-591438.8color is a Javascript color conversion and manipulation library. On 8 September 2025, the npm publishing account for color was taken over af CVE-2025-591448.8debug is a JavaScript debugging utility. On 8 September 2025, the npm publishing account for debug was taken over after a phishing attack. V CVE-2025-591458.8color-name is a JSON with CSS color names. On 8 September 2025, an npm publishing account for color-name was taken over after a phishing att CVE-2025-591468.5New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. An authenticated Server-Side Reques CVE-2025-591477.5Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Versi CVE-2025-591487.5Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Versi CVE-2025-591496.2Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In ve