Post
OffSequence
offseq.bsky.social
did:plc:t5t6qep2vfipbi7f54demwev
Mailgun for WordPress ≤2.2.0 hit by CRITICAL SSRF (CVE-2026-78003). Unauthenticated attackers can hijack admin resets via site API key. Update/disable plugin ASAP. https://radar.offseq.com/threat/cve-2026-78003-cwe-918-server-side-request-forgery-ssrf-in-mailgun-mailgun-for-wordpress-6ee94923f1ee...
https://radar.offseq.com/threat/cve-2026-78003-cwe-918-server-side-request-forgery-ssrf-in-mailgun-mailgun-for-wordpress-6ee94923f1ee4923
2026-08-22T09:00:26.465Z