The MimeTypes Link Icons plugin for WordPress contains a Server-Side Request Forgery vulnerability that allows authenticated attackers to perform unauthorized requests to internal services.

This flaw exists in the plugin when the Show file size feature is enabled, allowing an attacker with Contributor-level access or higher to trigger outbound HTTP requests to arbitrary URLs. By manipulating these requests, an attacker can interact with internal network services that are otherwise inaccessible from the public internet.

The ability to perform Server-Side Request Forgery poses a significant risk to internal network security. Attackers can leverage this vulnerability to scan internal infrastructure, access sensitive metadata services, or interact with local services, potentially leading to unauthorized data exposure or further compromise of the internal environment. With a CVSS score of 8.3, this high-severity issue requires immediate attention to prevent lateral movement within the network.

Immediate Action: Since a specific patch is not confirmed, disable the Show file size feature within the MimeTypes Link Icons plugin settings immediately. If the functionality is not business-critical, deactivate and remove the plugin until a secure version is released by the vendor.

Proactive Monitoring: Monitor server access logs for unusual outbound traffic patterns originating from the web application, particularly requests directed toward internal IP addresses or private network ranges.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block suspicious outbound requests or to restrict access to sensitive internal endpoints from the web server environment.

Public Exploit Available: Unknown.

The vulnerability in the MimeTypes Link Icons plugin represents a clear path for internal network reconnaissance and potential service compromise. Given the high CVSS score and the nature of the SSRF flaw, administrators should prioritize disabling the affected feature or the plugin entirely to mitigate the risk of unauthorized internal access. Ensure that user roles are strictly managed to limit the number of accounts capable of performing these actions.