CVE-2026-11370 | joomunited WP Meta SEO Plugin up to 4.5.18 on WordPress Outbound Requests new_link server-side request forgery

A vulnerability, which was classified as critical, was found in joomunited WP Meta SEO Plugin up to 4.5.18 on WordPress. Affected is an unknown function of the component Outbound Requests Handler. Such manipulation of the argument new_link leads to server-side request forgery.

This vulnerability is referenced as CVE-2026-11370. It is possible to launch the attack remotely. No exploit is available.

You should upgrade the affected component.