Medium severity5.8NVD Advisory· Published Mar 31, 2026· Updated Apr 15, 2026

CVE-2026-3881

Description

The Performance Monitor WordPress plugin through 1.0.6 does not validate a parameter before making a request to it, which could allow unauthenticated users to perform SSRF attacks

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Performance Monitor/Performance Monitorllm-create
Range: <=1.0.6
WordPress/Performance Monitorwp-canonicalize

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/4b30421e-9848-45ce-87ab-0229d9d7df01/nvd

News mentions

No linked articles in our index yet.

cvss	0.377
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000