CVE-2026-16600

CVE-2026-16600 affects the SmartAIPress WordPress plugin through version 1.2.0 . The vulnerability is a full-read Server-Side Request Forgery (SSRF) caused by a missing capability check on the AJAX action smartaipress_openai_upload_and_set_featured_image combined with the absence of validation on...

EUVD-2026-68043

The SmartAIPress WordPress plugin through 1.2.0 does not perform a capability check on one of its AJAX actions and does not validate a user-supplied URL before fetching it server-side, allowing users with subscriber-level access and above to make the site retrieve arbitrary internal or external...