A Server-Side Request Forgery (SSRF) vulnerability was discovered in the Visual Link Preview plugin for WordPress. The issue, tracked as CVE-2026-39670, allows attackers to make unauthorized requests on behalf of the server. The vulnerability affects the plugin from its inception up to and including version 2.3.0. Users of the affected versions should consider updating to a patched version, if available, [truncated]
CVE-2025-68033 Insertion of Sensitive Information Into Sent Data vulnerability in Brecht Custom Related Posts custom-related-posts allows Retrieve Embedded Sensitive Data. This issue affects Custom Related Posts: from n/a through <= 1.8.0. The vulnerability involves the insertion of sensitive information into sent data, potentially allowing retrieval of embedded sensitive data. Defenders responsible for C [truncated]
