PULSEUnderground Intel

LIVE50signals / 24h

FEED

ransomkillsec reclama a cashcowboy · US · Financial Servicesransomkillsec reclama a Bulwark Exterminating · US · Otherransomkillsec reclama a origins ivf · IN · Healthcareransomqilin reclama a Machinerie P&W · CA · Manufacturingransomqilin reclama a ABM Enviro · CA · Professional Servicesransomkrybit reclama a nilepet.com · EG · Retail & E-Commerceransomthegentlemen reclama a European Design · CA · Otherransomthegentlemen reclama a MK Jewelry · MK · Retail & E-Commerceransomthegentlemen reclama a GUERREIROS seguros · PT · Financial Servicesransomthegentlemen reclama a Tikona Infinet · IN · Technologyransomthegentlemen reclama a TC Printing · AU · Manufacturingransomthegentlemen reclama a Oldelval Oleoductos del Valle · AR · Energy & Utilitiesransomthegentlemen reclama a Decoupe Laser Services · FR · Manufacturingransomthegentlemen reclama a Thialf · NL · Energy & Utilitiesransomkillsec reclama a cashcowboy · US · Financial Servicesransomkillsec reclama a Bulwark Exterminating · US · Otherransomkillsec reclama a origins ivf · IN · Healthcareransomqilin reclama a Machinerie P&W · CA · Manufacturingransomqilin reclama a ABM Enviro · CA · Professional Servicesransomkrybit reclama a nilepet.com · EG · Retail & E-Commerceransomthegentlemen reclama a European Design · CA · Otherransomthegentlemen reclama a MK Jewelry · MK · Retail & E-Commerceransomthegentlemen reclama a GUERREIROS seguros · PT · Financial Servicesransomthegentlemen reclama a Tikona Infinet · IN · Technologyransomthegentlemen reclama a TC Printing · AU · Manufacturingransomthegentlemen reclama a Oldelval Oleoductos del Valle · AR · Energy & Utilitiesransomthegentlemen reclama a Decoupe Laser Services · FR · Manufacturingransomthegentlemen reclama a Thialf · NL · Energy & Utilities

CVE WatchJul 23, 2026

CVE-2026-24639

Author Server Side Request Forgery (SSRF) in Photo Block <= 1.7.1 versions.

CVSS

4.4

Medium

EPSS

—

KEV

—

Exploit Today

0

0-100

Published: Jul 23, 2026 · Last modified: Jul 23, 2026 · CWE-918

EPSS · 30d

Not enough EPSS history yet.

Technical description

Author Server Side Request Forgery (SSRF) in Photo Block <= 1.7.1 versions.

Official references

patchstack.comhttps://patchstack.com/database/wordpress/plugin/photo-block/vulnerability/wordpress-photo-block-plugin-1-7-1-server-side-request-forgery-ssrf-vulnerability?_s_id=cve

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-655167.2 HIG

——0Unauthenticated Server Side Request Forgery (SSRF) in PeproDev Ultimate Invoice <= 2.2.6 versions.6h CVE-2026-654964.4 MED

——0Author Server Side Request Forgery (SSRF) in Complianz <= 7.5.0 versions.6h CVE-2026-654674.9 MED

——0Contributor Server Side Request Forgery (SSRF) in JetEngine <= 3.8.11 versions.6h CVE-2026-654664.9 MED

——0Custom role Server Side Request Forgery (SSRF) in JetBooking <= 4.1.2 versions.6h CVE-2026-64873—

——2Custom query URLs could access internal or reserved network services.8h CVE-2026-64799—

——3Content-controlled image URLs could request private or reserved network services, follow unsafe redirects and save responses without validating that they were images. This could result in SSRF, internal-data access or writing attacker-controlled files into a web-accessible folder.8h