CVE-2026-11370 | joomunited WP Meta SEO Plugin up to 4.5.18 on WordPress Outbound Requests new_link server-side request forgery

June 24, 2026 Yanac

A vulnerability, which was classified as critical, was found in joomunited WP Meta SEO Plugin up to 4.5.18 on WordPress. Affected is an unknown function of the component Outbound Requests Handler. Such manipulation of the argument new_link leads to server-side request forgery.

This vulnerability is referenced as CVE-2026-11370. It is possible to launch the attack remotely. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More