CVE-2026-12095 | bytuncay Kargo Takip Plugin up to 1.2 on WordPress api_url server-side request forgery

June 24, 2026 Yanac

A vulnerability, which was classified as critical, was found in bytuncay Kargo Takip Plugin up to 1.2 on WordPress. This affects an unknown function. Such manipulation of the argument api_url leads to server-side request forgery.

This vulnerability is uniquely identified as CVE-2026-12095. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More