CVE-2026-3881 in Performance Monitor Plugin
摘要 (英语)
The Performance Monitor WordPress plugin through 1.0.6 does not validate a parameter before making a request to it, which could allow unauthenticated users to perform SSRF attacks
负责
WPScan
预定
2026-03-10
披露
2026-03-31
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 354330 | Performance Monitor Plugin 权限提升 | 918 | 未定义 | 未定义 | CVE-2026-3881 |