What is GHSA-h5rr-p7mm-2q67?

GHSA-h5rr-p7mm-2q67 is a security advisory published by GitHub Security Advisories with Medium severity. The Visualizer WordPress plugin before 4.0.6 does not restrict a user-supplied URL to safe...

Which CVE IDs does GHSA-h5rr-p7mm-2q67 cover?

GHSA-h5rr-p7mm-2q67 covers the following CVE IDs: CVE-2026-14939. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-h5rr-p7mm-2q67?

GHSA-h5rr-p7mm-2q67 has a CVSS v3 base score of 6.8, published by GitHub Security Advisories.

GHSA-h5rr-p7mm-2q67MediumCVSS 6.8

The Visualizer WordPress plugin before 4.0.6 does not restrict a user-supplied URL to safe...

Vendor

GitHub Security Advisories

Published

August 4, 2026

Last Modified

August 4, 2026

🔗 CVE IDs covered (1)

CVE-2026-14939 →

📋 Description

The Visualizer WordPress plugin before 4.0.6 does not restrict a user-supplied URL to safe address ranges before fetching it server-side, allowing users with Contributor-level access and above to perform Server-Side Request Forgery against link-local instance-metadata endpoints. As the fetched response is returned in the reply, the attack is non-blind, enabling retrieval of cloud instance metadata (including IAM credentials) on cloud-hosted sites.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-14939
https://wpscan.com/vulnerability/b9a6211c-3173-4dd6-8a8d-32be248762bb
https://github.com/advisories/GHSA-h5rr-p7mm-2q67