Vulnerability in Performance Monitor

CVE-2026-3881

The Performance Monitor WordPress plugin through 1.0.6 does not validate a parameter before making a request to it, which could allow unauthenticated users to perform SSRF attacks

EPSS: 0.000 (13.0th percentile) — read the EPSS interpretation.

Affected products

Unknown Performance Monitor — versions 0

References

wpscan.com/vulnerability/4b30421e-9848-45ce-87ab-0229d9d7df01/ (exploit, vdb-entry, technical-description)