2026-03-31 06:00:06
WPScan
PUBLISHED
The Performance Monitor WordPress plugin through 1.0.6 does not validate a parameter before making a request to it, which could allow unauthenticated users to perform SSRF attacks