CVE-2026-105967
Gallery for Social Photo <= 1.0.0.41 - Unauthenticated SSRF via next_url Parameter
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Gallery for Social Photo WordPress plugin through 1.0.0.41 does not validate a user-supplied URL before using it to perform a server-side request, allowing unauthenticated attackers to make the server issue requests to arbitrary internal hosts and read the responses.
| Vendor | unknown |
| Product | gallery for social photo |
| Published | Nov 3, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown gallery for social photo
Be the first to know when new unknown vulnerabilities affecting unknown gallery for social photo are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Gallery for Social Photo
0 ≤ 1.0.0.41
References
Credits
João Ramos Maciel WPScan