CVE-2026-3881
Performance Monitor <= 1.0.6 - Unauthenticated Blind SSRF
The Performance Monitor WordPress plugin through 1.0.6 does not validate a parameter before making a request to it, which could allow unauthenticated users to perform SSRF attacks
CVSS 3.1 · 5.8 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products