What is CVE-2025-7507?

CVE-2025-7507 is a medium-severity vulnerability in Elinkcontent Elink – Embed Content, classified under Improper Input Validation. CVSS score: 6.4/10. Published 2025-08-15.

How severe is CVE-2025-7507?

Medium severity. CVSS v3 base score is 6.4 out of 10.

Improper input validation in Elinkcontent Elink – Embed Content

CVE-2025-7507

The elink – Embed Content plugin for WordPress is vulnerable to Malicious Redirect in all versions up to, and including, 1.1.0. This is due to the plugin not restricting URLS that can be supplied through the elink shortcode. This makes it…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.002 (13.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L.

Affected products

Elinkcontent Elink – Embed Content — versions 0

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

Frequently asked questions

What is CVE-2025-7507?: CVE-2025-7507 is a medium-severity vulnerability in Elinkcontent Elink – Embed Content, classified under Improper Input Validation. CVSS score: 6.4/10. Published 2025-08-15.
How severe is CVE-2025-7507?: Medium severity. CVSS v3 base score is 6.4 out of 10.