CVE-2026-3881 in Performance Monitor Plugin
Сводка (Английский)
The Performance Monitor WordPress plugin through 1.0.6 does not validate a parameter before making a request to it, which could allow unauthenticated users to perform SSRF attacks
Ответственный
WPScan
Резервировать
10.03.2026
Раскрытие
31.03.2026
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 354330 | Performance Monitor Plugin эскалация привилегий | 918 | Не определено | Не определено | CVE-2026-3881 |