Skip to content
OpenAdvisories

Vendor

kiboit

2 known vulnerabilities.

Products

PhastPress 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2026-3712

    PhastPress <= 3.10 - Unauthenticated Server-Side Request Forgery via 'src' Parameter

    The PhastPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.10 This is due to the scripts service endpoint constructing its URL whitelist dynamically from the attacker-controlled HTTP 'Host' header.…

    kiboit PhastPress Web / CMS