CVE-2025-13174 | rachelos WeRSS we-mp-rss up to 1.4.7 Webhook mps.py do_job web_hook_url server-side request forgery

A vulnerability was found in rachelos WeRSS we-mp-rss up to 1.4.7. It has been declared as critical. Affected by this vulnerability is the function do_job of the file /rachelos/we-mp-rss/blob/main/jobs/mps.py of the component Webhook Module. Executing manipulation of the argument web_hook_url can lead to server-side request forgery.

The identification of this vulnerability is CVE-2025-13174. The attack may be launched remotely. Furthermore, there is an exploit available.