Security Advisory

CVE-2026-3881

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-03-31 06:00:06
Last updated 2026-04-02 12:39:58
Assigner WPScan
State PUBLISHED

Description

The Performance Monitor WordPress plugin through 1.0.6 does not validate a parameter before making a request to it, which could allow unauthenticated users to perform SSRF attacks