Threats tagged 'ghsa-cjjx-97f3-7jm6'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.2	CVE-2026-7049The PixelYourSite Pro – Your smart PIXEL (TAG) Manager plugin for WordPress is vulnerable to Server-Side Request High7.22026-05-02GCVE DatabaseCVE-2026-7049 The PixelYourSite Pro WordPress plugin versions up to 12.5.0.1 contain a Server-Side Request Forgery (SSRF) vulnerability via the scan_video feature. This flaw allows unauthenticated attackers to make arbitrary web requests from the server, potentially accessing or modifying internal services. The SSRF is blind, as response bodies are not returned to the attacker but only parsed internally for specific video patterns. Report on CVE-2026-7049 Vulnerability CWE-918 #ghsa-cjjx-97f3-7jm6	GCVE Database	2026-05-02

Page 1 of 1