WordPress Media Cleaner <= 7.0.3 Authenticated SSRF in get_urls_from_html (CVE-2026-4912)

www.wordfence.com 2026-07-30查看中文 →

Security AdvisoryCVE-2026-4912MediumWordPress

Affected:

Media Cleaner: Clean your WordPress! <= 7.0.3

Fixed in:

7.0.6

Referenced CVEs: CVE-2026-4912 · 4.1

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from www.wordfence.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

UsersWP <= 1.2.69 Stored XSS via Badge Widget (CVE-2026-18501) Advisory 2026-08-06 WPMU DEV Dashboard CVE-2026-15439 Auth Bypass to RCE via Forged HMAC 2026-08-06 Unauthenticated Stored XSS in TranslatePress <= 3.2.6 (CVE-2026-18510) 2026-08-06 LatePoint <= 5.3.2 Authenticated Stored XSS via Shortcode Attributes (CVE-2026-5391) 2026-08-06 ShopLentor <= 3.3.7 Authenticated Arbitrary Function Execution (CVE-2026-6020) Advisory 2026-08-06

Offline Archive

Offline screenshot & PDF are Pro-exclusive