CVE-2026-3881 in Performance Monitor Plugin
Resumen (Inglés)
The Performance Monitor WordPress plugin through 1.0.6 does not validate a parameter before making a request to it, which could allow unauthenticated users to perform SSRF attacks
Responsable
WPScan
Reservar
2026-03-10
Divulgación
2026-03-31
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 354330 | Performance Monitor Plugin escalada de privilegios | 918 | No está definido | No está definido | CVE-2026-3881 |