Description
Subscriber Server Side Request Forgery (SSRF) in utm.codes <= 1.9.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Chris Carlevato | utm.codes | ≤ 1.9.0 | — |
Medium · 6.4
CVE-2026-56026
EUVD-2026-39689GHSA-h3w6-j9vx-xh22
WordPress utm.codes plugin <= 1.9.0 - Server Side Request Forgery (SSRF) vulnerability
Published Jun 26, 2026 · Updated Jun 26, 2026 · Assigned by Patchstack