CVE-2026-0686

The CVE-2026-0686 entry concerns the WordPress Webmention plugin. Affected component/function: MF2::parse_authorpage and Receiver::post, enabling Server-Side Request Forgery (SSRF) in all versions up to and including 5.6.2. This allows unauthenticated attackers to issue web requests from the vuln...