Pfefferle Webmention

3 CVEs affecting Pfefferle Webmention. Latest disclosed: 2026-06-30. Critical: 0, High: 2.

Top CVEs affecting Pfefferle Webmention
CVESeverityScorePublishedSummary
CVE-2026-10513High7.22026-06-30The Webmention plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 5.8.0 via parser-derived 'avatar' and 'url' au…
CVE-2026-0686High7.22026-04-02The Webmention plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.6.2 in the 'MF2::parse_authorpage' fun…
CVE-2026-0688Medium6.42026-04-02The Webmention plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.6.2 via the 'Tools::read' function. Th…