PT-2026-4210 · WordPress · Smartdatasoft Electrician

Bonds · Published 2026-01-22 · Updated 2026-01-22 · CVE-2026-22358

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SmartDataSoft Electrician - Electrical Service WordPress electrician versions through 5.6

Description The software contains a Server-Side Request Forgery (SSRF) issue. This allows for Server Side Request Forgery. The vulnerability exists due to insufficient input validation, potentially allowing an attacker to make requests to internal or external resources on behalf of the server.

Recommendations Versions prior to 5.7 should be updated.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-22358

Affected Products

Smartdatasoft Electrician

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-22358 · Security Note
• https://twitter.com/CVEnew/status/2014383077452021816 · Twitter Post
• https://patchstack.com/database/Wordpress/Theme/electrician/vulnerability/wordpress-electrician-electrical-service-wordpress-theme-5-6-server-side-request-forgery-ssrf-vulnerability?_s_id=cve · Note