PT-2026-25204 · Katsushi Kawamori · Simple Blog Card

Nabil Irawan · Published 2026-03-13 · Updated 2026-03-15 · CVE-2026-32357

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Katsushi Kawamori Simple Blog Card versions prior to 2.38

Description The software contains a Server-Side Request Forgery (SSRF) issue. This allows for Server Side Request Forgery.

Recommendations Update to a version prior to 2.38.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-32357

Affected Products

Simple Blog Card

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-32357 · Security Note
• https://twitter.com/CVEnew/status/2032998266552336838 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/simple-blog-card/vulnerability/wordpress-simple-blog-card-plugin-2-37-server-side-request-forgery-ssrf-vulnerability?_s_id=cve · Note