CVE-2026-105967

Full vulnerability record from the local CVENow database.

Description

The Gallery for Social Photo WordPress plugin through 1.0.0.41 does not validate a user-supplied URL before using it to perform a server-side request, allowing unauthenticated attackers to make the server issue requests to arbitrary internal hosts and read the responses.

Severity

Not scored

CVSS score

Not available

Vulnerability status

Received

Source identifier

[email protected]

Published

2026-11-03 06:17:37.393000

Last modified

2026-11-03 06:17:37.393000

View original CVE JSON

{
  "id": "CVE-2026-105967",
  "sourceIdentifier": "[email protected]",
  "published": "2026-11-03T06:17:37.393",
  "lastModified": "2026-11-03T06:17:37.393",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Gallery for Social Photo WordPress plugin through 1.0.0.41 does not validate a user-supplied URL before using it to perform a server-side request, allowing unauthenticated attackers to make the server issue requests to arbitrary internal hosts and read the responses."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Unknown",
          "product": "Gallery for Social Photo",
          "defaultStatus": "unknown",
          "versions": [
            {
              "version": "0",
              "lessThanOrEqual": "1.0.0.41",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://wpscan.com/vulnerability/30dffd34-b7e5-4afc-809b-abb5c9d20590/",
      "source": "[email protected]"
    }
  ]
}