← WordPress Vulnerabilities
WordPress security by component

URL Preview

URL Preview is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jun 24, 2026; the highest CVE/CNA score is 7.2.

Plugin slug: link-preview

CVE-2026-12100: URL Preview: Server-side request forgery

URL Preview is affected by server-side request forgery. The vulnerable path is reachable without authentication. The vulnerable server can be induced to make attacker-selected network requests. The published affected range is <= 1.0.

PublishedJun 24, 2026
Known safe version> 1.0
Safe version
Jun 24, 2026 CVE-2026-12100
URL Preview: Server-side request forgery
URL Preview is affected by server-side request forgery. The vulnerable path is reachable without authentication. The vulnerable server can be induced to make attacker-selected network requests. The published affected range is <= 1.0.
> 1.0
CVE7.2
NVDPending