Live › vulnerability › CVE-2026-105967
The Gallery for Social Photo WordPress plugin through version 1.0.0.41 fetches a URL supplied by the user without checking it. An unauthenticated attacker can make the server request internal hosts and read the responses.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 06:18 UTC. All times on this page are UTC.
Sites running the Gallery for Social Photo WordPress plugin (feed-instagram-lite) at 1.0.0.41 or earlier are exposed, because the flaw can be triggered without logging in through the AJAX feed pagination endpoint (next_url parameter). The attacker can make the web server request internal hosts and read the responses, so hosts on cloud or internal networks matter most. Sites without the plugin, or on 1.0.0.43 or later, can skip it.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| feed-instagram-lite | wordpress | <= 1.0.0.41 | 1.0.0.43 |
Update Gallery for Social Photo (slug feed-instagram-lite) to 1.0.0.43 or later; the maintainers changelog lists Security SSRF issue in AJAX feed pagination endpoint' fixed there.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
The Gallery for Social Photo WordPress plugin through 1.0.0.41 does not validate a user-supplied URL before using it to perform a server-side request, allowing unauthenticated attackers to make the server issue requests to arbitrary internal hosts and read the responses.
This page as .md · .json · in your agent: get_signal("CVE-2026-105967")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.