Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 1 min 173 bronnen 2 kritiek 36 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2026-110692

MEDIUM · 4.1 CVSS Gepubliceerd: CWE-918

Beschrijving

The PowerPack Addons for Elementor: Widgets, Form Styler and Templates WordPress plugin before 3.1.3 does not validate a user-supplied URL before using it in a server-side HTTP request, which could allow users with the contributor role and above to perform Server-Side Request Forgery attacks against internal and loopback resources and read the response back.

References