TI-2026-67940 CVE-2026-39728 · GHSA-f9x9-mxcq-hx6w
Server-side request forgery in WordPress Instapage plugin
Priority LOW 37
Unauthenticated Server Side Request Forgery (SSRF) in Instapage Plugin <= 3.7.2 versions.
No instapagedev vulnerabilities are listed in CISA KEV.
2 records
Unauthenticated Server Side Request Forgery (SSRF) in Instapage Plugin <= 3.7.2 versions.
Cross-Site Request Forgery (CSRF) vulnerability in instapagedev Instapage Plugin instapage allows Cross Site Request Forgery.This issue affects Instapage Plugin: from n/a through <= 3.7.0.