2026年9月4日

CVE-2026-13147 [CRITICAL] – The Kirki WordPress plugin before 6.0.12 does not validate a user-supplied URL before req

未分类

📑 文章目录

The Kirki WordPress plugin before 6.0.12 does not validate a user-supplied URL before requesting it server-side, allowing unauthenticated attackers to make the site issue HTTP requests to arbitrary hosts (Server-Side Request Forgery).

相关文章