CVE-2026-96533
2026-09-26
06h00 +00:00
06h00 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
Testimonials Widget <= 4.0.4 - Unauthenticated SSRF via Featured Image URL
The Testimonials Widget WordPress plugin through 4.0.4 does not validate a user-supplied URL before fetching it server-side and storing the response as a public file, allowing unauthenticated users to make the server issue requests to internal services and read the responses.CVE 信息
参考资料
https://wpscan.com/vulnerability/062284b2-b55d-42e2-8dda-ced7845d7df0/
Tags : exploit, vdb-entry, technical-description
Tags : exploit, vdb-entry, technical-description
