CVE-2026-1294 | All In One Image Viewer Block Plugin up to 1.0.2 on WordPress REST API Endpoint server-side request forgery

A vulnerability labeled as critical has been found in All In One Image Viewer Block Plugin up to 1.0.2 on WordPress. This issue affects some unknown processing of the component REST API Endpoint. Such manipulation leads to server-side request forgery.

This vulnerability is referenced as CVE-2026-1294. It is possible to launch the attack remotely. No exploit is available.