Search vulnerabilities

Results 1

Export CSV
CVE-2026-3881

Performance Monitor <= 1.0.6 - Unauthenticated Blind SSRF

The Performance Monitor WordPress plugin through 1.0.6 does not validate a parameter before making a request to it, which could allow unauthenticated users to perform SSRF attacks

CVSS 3.1 · 5.8 Medium EPSS < 1% KEV · Not listed