stefanbohacek

Products

ProductCVEsExploitedLatest
fediverse-embeds-wordpress-plugin2–Jun 11, 2026

Exploited and recent CVEs

  • CVE-2026-46697 High 7.5 Fediverse Embeds: Unauthenticated SSRF / open proxy via REST media-proxy endpoint 0.2%
  • CVE-2026-46698 Medium 5.3 Fediverse Embeds: Public-nonce SSRF via ftf_get_site_info AJAX action 0.2%