CVE-2026-3881

The Performance Monitor WordPress plugin through 1.0.6 does not validate a parameter before making a request to it, which could allow unauthenticated users to perform SSRF attacks...

CVE-2026-3881

The CVE-2026-3881 affects the Performance Monitor WordPress plugin up to version 1.0.6. It allows unauthenticated SSRF by not validating a parameter before initiating a request to that URL. Impact is SSRF; no exploit details or remediation are provided in the documents.

PT-2026-29198

The Performance Monitor WordPress plugin through 1.0.6 does not validate a parameter before making a request to it, which could allow unauthenticated users to perform SSRF attacks...