Threats tagged 'ghsa-w229-45jg-vp35'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	2.2	EPSS 0.2%	CVE-2026-12971LearnPress (WordPress plugin) · Server-Side Request Forgery (SSRF) Low2.2EPSS 0.2%2026-08-10CVE Database V5CVE-2026-12971 The LearnPress WordPress plugin before 4.4.4 does not validate a user-supplied URL before the server fetches it, allowing users with the instructor role to induce the server to issue requests to arbitrary external hosts, a blind and bounded server-side request forgery. EPSS 0.2%Vulnerability CWE-918 #ghsa-w229-45jg-vp35	CVE Database V5	2026-08-10

Page 1 of 1