Planyo Online Reservation System CVE-2026-3576 detection

Detects Planyo Online Reservation System = 3.0 with unauthenticated SSRF via ulap.php ulapurl CVE-2026-3576. Confirms the localhost allow-list bypass with a differential probe disallowed host blocked, localhost not. Version/SSRF check only — no file:// LFI or content exfiltration. !/usr/bin/env...

Planyo ulap.php unauthenticated SSRF (CVE-2026-3576)

Confirms CVE-2026-3576 in Planyo Online Reservation System = 3.0: unauthenticated SSRF via /wp-content/plugins/planyo-online-reservation-system/ulap.php ulapurl. Uses a differential allow-list probe disallowed host blocked, localhost allowed and optionally fetches a lab canary bound on the target...

CVE-2026-3576

CVE-2026-3576 affects the Planyo Online Reservation System plugin for WordPress (versions up to 3.0). The flaw is an unauthenticated Server-Side Request Forgery via the ulap_url AJAX proxy (ulap.php). The allowlist checks a host (e.g., localhost) but does not validate the URL scheme, allowing a c...