Threats tagged 'ghsa-fx75-97x2-v9j2'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.3%	CVE-2026-14860Podcast Player (WordPress plugin) · Server-Side Request Forgery (SSRF) Medium5.3EPSS 0.3%2026-08-10CVE Database V5CVE-2026-14860 The Podcast Player WordPress plugin before 8.3.1 does not validate the destination of a server-side request built from user-supplied input, allowing unauthenticated attackers to make the server issue requests to arbitrary hosts and read back responses that parse as RSS/XML. EPSS 0.3%Vulnerability CWE-918 #ghsa-fx75-97x2-v9j2	CVE Database V5	2026-08-10

Page 1 of 1