Vulnerability Bulletins

CVE-2026-3881

   
Affected software WORDPRESS
 
The Performance Monitor WordPress plugin through 1.0.6 does not validate a parameter before making a request to it, which could allow unauthenticated users to perform SSRF attacks

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-3881