WordPress Plugin Vulnerabilities

LearnPress < 4.4.4 - Instructor+ Server-Side Request Forgery via openai_apply_image_feature

Description

The plugin does not validate a user-supplied URL before the server fetches it, allowing users with the instructor role to induce the server to issue requests to arbitrary external hosts, a blind and bounded server-side request forgery.

Proof of Concept

Affects Plugins

Plugin icon
learnpress
Fixed in 4.4.4

References

CVE
CVE-2026-12971

Classification

Type
SSRF
OWASP top 10
A1: Injection
CWE
CWE-918
CVSS
2.6 (low)

Miscellaneous

Original Researcher
Meher Sudhakar Abbireddi
Submitter
Meher Sudhakar Abbireddi
Verified
Yes
WPVDB ID
ef69bd9d-ec2a-4526-b2b9-51948fa76980

Timeline

Publicly Published
2026-08-06 (about 4 days ago)
Added
2026-08-06 (about 3 days ago)
Last Updated
2026-08-06 (about 3 days ago)

Other

Published
Title
Published
2026-02-24
Title
Responsive Lightbox & Gallery < 2.7.2 - Authenticated (Author+) Server-Side Request Forgery via Remote Library Image Upload
Published
2024-07-08
Title
Jetpack Boost < 3.4.7 - Admin+ SSRF
Published
2024-11-27
Title
Asset CleanUp: Page Speed Booster < 1.3.9.9 - Authenticated (Admin+) Server-Side Request Forgery
Published
2024-05-10
Title
ShortPixel Adaptive Images < 3.8.4 - Authenticated (Admin+) Server-Side Request Forgery
Published
2026-06-18
Title
Bit integrations < 2.8.8 - Unauthenticated Server-Side Request Forgery via Form Field Upload Mapping