CVE-2026-40500 Blast Radius

✕ WITHDRAWN — HISTORICAL DATAProcessWire CMS version 3.0.255 and prior contain a server-side request forgery vulnerability in the admin panel's 'Add Module From URL' feature that