CVE-2026-10526 | EmbedPress Plugin up to 4.6.0 on WordPress server-side request forgery

A vulnerability was found in EmbedPress Plugin up to 4.6.0 on WordPress. It has been declared as critical. This vulnerability affects unknown code. Executing a manipulation can lead to server-side request forgery.

This vulnerability is tracked as CVE-2026-10526. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.