@pulse-wp.com on Bluesky

JavaScript RequiredThis is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is. Learn more about Bluesky at bsky.social and atproto.com.

Post

Pulse WP

pulse-wp.com

did:plc:m7puovzqhxurz66hip2xwfs6

CVE-2026-46697. CVSS 7.5. Fediverse Embeds plugin leaks wp-config, database dumps, API keys. Anyone. No auth. No allowlist on URL forwarding. Disable it now. No patch available yet. Scan your WordPress site: pulse-wp.com #WordPress #SSRF #CyberSecurity

2026-06-12T00:00:34.669Z