Unrated severityNVD Advisory· Published Nov 3, 2026
CVE-2026-105967
CVE-2026-105967
Description
The Gallery for Social Photo WordPress plugin through 1.0.0.41 does not validate a user-supplied URL before using it to perform a server-side request, allowing unauthenticated attackers to make the server issue requests to arbitrary internal hosts and read the responses.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=1.0.0.41
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.