CVE-2026-12095

The Kargo Takip plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.2 via the 'api_url' parameter. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. The script echoes internal API response data (specifically the value of any 'auth' key in a JSON response body) verbatim back to the attacker's browser, enabling direct exfiltration of responses from internal services such as cloud instance metadata endpoints.

• CWE-918

• https://plugins.trac.wordpress.org/browser/kargo-takip/trunk/ui/decodeandview.php#L21
• https://plugins.trac.wordpress.org/browser/kargo-takip/trunk/ui/decodeandview.php#L28
• https://plugins.trac.wordpress.org/browser/kargo-takip/trunk/ui/decodeandview.php#L3
• https://www.wordfence.com/threat-intel/vulnerabilities/id/79d91300-b6b7-4c3f-89b1-c48b9e47c415?source=cve

Published

Jun 24, 2026

Last Modified

Jun 25, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-12086IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3…5.5
• CVE-2026-12087Socket versions before 2.041 for Perl have an out-of-bounds …9.1
• CVE-2026-12089The LWS Optimize – All-in-One Speed Booster & Cache Tools pl…4.9
• CVE-2026-12090The Taskbuilder – Project Management & Task Management Tool …6.5
• CVE-2026-12093The Simple Membership plugin for WordPress is vulnerable to …5.3
• CVE-2026-12094The Advanced Contact Form 7 - Compact DB plugin for WordPres…5.3
• CVE-2026-12097The User Management plugin for WordPress is vulnerable to au…5.3
• CVE-2026-12098The PowerPress Podcasting plugin by Blubrry plugin for WordP…6.4
• CVE-2026-1210The Happy Addons for Elementor plugin for WordPress is vulne…6.4
• CVE-2026-12100The URL Preview plugin for WordPress is vulnerable to Server…7.2
• CVE-2026-12102The UsersWP – Front-end login form, User Registration, User …2.7
• CVE-2026-12103The Wallet for WooCommerce plugin for WordPress is vulnerabl…4.3