Security Risk Category

open-proxy Security Risks

Published vulnerability pages connected to open-proxy. One risk can appear in multiple categories while keeping one canonical page.

open-proxy risks

Showing 1 of 1 published risks.

mediumEPSS 0.001

Fediverse Embeds WordPress Plugin Media Proxy SSRF Vulnerability

The Fediverse Embeds WordPress plugin before 1.5.8 does not validate the destination of the server-side request performed by an unauthenticated media-proxying endpoint, allowing anonymous users to make the site fetch arbitrary URLs, including internal and private-network addresses, and read back the response body. This results in a full-read Server-Side Request Forgery and open proxy.

CVE-2026-12516wordpressfediverse-embedsssrfopen-proxy

Updated Jul 10, 2026