PT-2026-31232 · Unknown · Brecht Visual Link Preview

Published 2026-04-08 · Updated 2026-04-12 · CVE-2026-39670

Positive Technologies (AI Summary)

CVSS v3.1

6.0

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Brecht Visual Link Preview versions through 2.3.0

Description A Server-Side Request Forgery (SSRF) vulnerability exists in Brecht Visual Link Preview. This allows for Server Side Request Forgery. The vulnerability affects the application's ability to handle external requests, potentially allowing an attacker to make requests on behalf of the server.

Recommendations Update to a version later than 2.3.0.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-39670

Affected Products

Brecht Visual Link Preview

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-39670 · Security Note
• https://twitter.com/infoflowcloud/status/2043297146451952097 · Twitter Post
• https://twitter.com/CVEnew/status/2043295729502835122 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/visual-link-preview/vulnerability/wordpress-visual-link-preview-plugin-2-3-0-server-side-request-forgery-ssrf-vulnerability?_s_id=cve · Note