Skip to content
CVE PROGRAM SOURCE RECORD6.0 Medium

CVE-2026-66654

WordPress Vehica Core plugin <= 1.0.104 - Server Side Request Forgery (SSRF) vulnerability

Description

Subscriber Server Side Request Forgery (SSRF) in Vehica Core <= 1.0.104 versions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TangibleWP Vehica Core

Default version status: unaffected

  • n/a to ≤ 1.0.104affected

References