Threats tagged 'ghsa-vxvw-9xhx-r2mf'

CVE-2026-97316 is a server-side request forgery (SSRF) vulnerability in the Broken Link Notifier WordPress plugin versions from 1.3.1 up to but not including 2.0.0.1. The plugin fails to re-validate redirect destinations when checking links, allowing unauthenticated attackers to bypass internal address filters and cause the server to send requests to internal services.