CVE-2026-42641

MediumCVSS 5.4

Published: 29/04/2026(UTC)Updated: 25/10/2026(UTC)Translated: 26/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.14%

3th percentile - higher than 3% of all known CVEs

Summary

Server-Side Request Forgery (SSRF) vulnerability in ILLID Share This Image plugin affects versions up to and including 2.14, allowing server-side requests to resources the attacker should not access.

Risk Assessment

SSRF may allow an attacker to probe and access internal network resources and cloud services.

Recommendation

Update the Share This Image plugin to a version later than 2.14 or disable it if no fix is available.

Other vulnerabilities in Share This Image

CVE-2026-39563Medium
The Share This Image plugin for WordPress has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels.

Original NVD description (English source)

Server-Side Request Forgery (SSRF) vulnerability in ILLID Share This Image share-this-image allows Server Side Request Forgery.This issue affects Share This Image: from n/a through <= 2.14.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS