CVE-2026-19050
ProSolution WP Client < 2.0.9 - Subscriber+ SSRF via proSol_url_validate
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The ProSolution WP Client WordPress plugin before 2.0.9 does not validate a user-supplied URL, and does not check the capability or nonce of the requester, before performing a server-side HTTP request with it, allowing any authenticated user, such as a subscriber, to make the site issue arbitrary requests to internal hosts and services, including requests with an attacker-chosen method, headers and body.
| Vendor | unknown |
| Product | prosolution wp client |
| Published | Aug 12, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown prosolution wp client
Be the first to know when new unknown vulnerabilities affecting unknown prosolution wp client are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / ProSolution WP Client
0 < 2.0.9
References
Credits
Nir Yehoshua WPScan