CVE-2026-14939

CVE-2026-14939 affects the Visualizer: Tables and Charts Manager WordPress plugin, vulnerable before version 4.0.6. The issue arises because a user-supplied URL is not restricted to safe address ranges when fetched server-side, enabling a Contributor+ user to perform a server-side request forgery...