CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.8. It affects WordPress. Exploitation may require the attacker to be authenticated.
CVE
CVE-2026-3881
Severity
MEDIUM
CVSS
5.8
EPSS
0.26%
WordPress
Original NVD Description
The Performance Monitor WordPress plugin through 1.0.6 does not validate a parameter before making a request to it, which could allow unauthenticated users to perform SSRF attacks