CVE-2026-39630

MediumCVSS 6.4

Published: 08/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.17%

6th percentile - higher than 6% of all known CVEs

Summary

The Getty Images plugin for WordPress is vulnerable to SSRF. An attacker can force the server to send requests to internal network resources.

Risk Assessment

Risk of scanning internal networks, accessing confidential data, or using the server to attack other systems.

Recommendation

Update the Getty Images plugin to the latest version.

Original NVD description (English source)

Server-Side Request Forgery (SSRF) vulnerability in Getty Images Getty Images getty-images allows Server Side Request Forgery.This issue affects Getty Images: from n/a through <= 4.1.0.