CVE-2026-32467

10th percentile - higher than 10% of all known CVEs

The [Aotuman] Grab WeChat Articles plugin version 2.0.1 and earlier contains a Server Side Request Forgery (SSRF) vulnerability in the subscriber. This allows an attacker to send requests from the server to internal resources.

An attacker can exploit SSRF to access internal services that should not be publicly reachable, potentially leading to data leakage or further attacks.

Update the plugin to a version newer than 2.0.1 if available, or apply other mitigations such as filtering outbound traffic.