Skip to content
OpenAdvisories

Vendor

pfefferle

4 known vulnerabilities.

Products

Webmention 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2026-10513

    Webmention <= 5.8.0 - Unauthenticated Stored Cross-Site Scripting via MF2 'photo'/'url' Author Properties

    The Webmention plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 5.8.0 via parser-derived 'avatar' and 'url' author metadata. This is due to insufficient input sanitization and output escaping on user-supplied M…

    pfefferle Webmention Web / CMS
  • High 7.2
    CVE-2026-0686

    Webmention <= 5.6.2 - Unauthenticated Blind Server-Side Request Forgery

    The Webmention plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.6.2 in the 'MF2::parse_authorpage' function via the 'Receiver::post' function. This makes it possible for unauthenticated attackers to mak…

    pfefferle Webmention Web / CMS