CVE-2026-1273 | PostX Plugin up to 5.0.8 on WordPress REST API Endpoint starter_dummy_post server-side request forgery

A vulnerability described as critical has been identified in PostX Plugin up to 5.0.8 on WordPress. The impacted element is the function starter_dummy_post of the file /ultp/v3/starter_dummy_post/ of the component REST API Endpoint. Such manipulation leads to server-side request forgery.

This vulnerability is uniquely identified as CVE-2026-1273. The attack can be launched remotely. No exploit exists.