The EXMAGE WordPress plugin before 1.0.7 does to ensure that images added via URLs are external images, which could lead to a blind SSRF issue by using local URLs
CVSS 3.1HIGH 7.2·Network·High privileges·No interaction·EPSS 0.01334·Published 2022-04-18·Fixed in 1.0.7CWE-918