5.8
Medium
CVE-2026-3881 The Performance Monitor WordPress plugin through 1.0.6 does not validate a parameter before making a request to it,…
Description
The Performance Monitor WordPress plugin through 1.0.6 does not validate a parameter before making a request to it, which could allow unauthenticated users to perform SSRF attacks
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Performance Monitor 1.0 | earliest → 1.0.6 | No fix stated |