CVE-2026-16600

CVE-2026-16600 affects the SmartAIPress WordPress plugin through version 1.2.0 . The vulnerability is a full-read Server-Side Request Forgery (SSRF) caused by a missing capability check on the AJAX action smartaipress_openai_upload_and_set_featured_image combined with the absence of validation on...