TI-2026-10420 CVE-2026-12100 · GHSA-mpqw-xp9q-3fpc
URL Preview <= 1.0 - Unauthenticated Server-Side Request Forgery via 'url' Parameter
Priority LOW 38
The URL Preview plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.0 via the 'url' parameter.