2 matches found
CVE-2026-27759
Featured Image from Content featured-image-from-content WordPress plugin versions prior to 1.7 contain an authenticated server-side request forgery vulnerability that allows Author-level users to fetch internal HTTP resources. Attackers can exploit insecure URL fetching and file write operations ...
5.3CVSS5.9AI score0.00412EPSS
SaveExploits0References1
CVE-2026-27759: Server-Side Request Forgery (SSRF)
Featured Image from Content featured-image-from-content WordPress plugin versions prior to 1.7 contain an authenticated server-side request forgery vulnerability that allows Author-level users to fetch internal HTTP resources. Attackers can exploit insecure URL fetching and file write operations ...
5.3CVSS5.8AI score0.00412EPSS
SaveExploits0References1
20