CVE-2026-12106 | Auto Upload Images Plugin up to 3.3.2 on WordPress downloadImage server-side request forgery

A vulnerability was found in Auto Upload Images Plugin up to 3.3.2 on WordPress and classified as critical. Impacted is the function downloadImage. Such manipulation leads to server-side request forgery.

This vulnerability is referenced as CVE-2026-12106. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More