Skip to content
OpenAdvisories

Vendor

pfefferle

4 known vulnerabilities.

Products

Webmention 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-111109

    Webmention <= 5.10.1 - Unauthenticated Stored Cross-Site Scripting via Open Graph og:title Meta Tag

    The Webmention plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Open Graph og:title meta tag of a webmention source URL in versions up to, and including, 5.10.1. This is due to insufficient input sanitization: Meta::add_properties() m…

    pfefferle Webmention Web / CMS
  • Medium 6.4
    CVE-2026-0688

    Webmention <= 5.6.2 - Authenticated (Subscriber+) Server-Side Request Forgery

    The Webmention plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.6.2 via the 'Tools::read' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make we…

    pfefferle Webmention Web / CMS