CVE-2026-3478: SSRF in Content Syndication Toolkit WordPress Plugin

The SSRF vulnerability in Content Syndication Toolkit allows an attacker to craft malicious requests that originate from the WordPress server. This can be exploited to access internal services that are not directly exposed to the internet, such as internal databases, administrative panels, or other sensitive resources. An attacker could potentially read sensitive data, modify configurations, or even gain a foothold within the internal network. The lack of input validation on the URL parameter in the redux_p AJAX action makes this exploitation straightforward, as the regex /.*/ allows any URL to be passed to wpremoterequest() without sanitization. This bypasses WordPress's built-in SSRF protections.

1. Reserved2026-03-03
2. Published2026-03-21
3. Modified2026-04-08
4. EPSS updated2026-03-28

The primary mitigation for CVE-2026-3478 is to upgrade the Content Syndication Toolkit plugin to a version that addresses the vulnerability. If upgrading is not immediately feasible, implement a Web Application Firewall (WAF) rule to block requests to the wpajaxnoprivreduxp endpoint or filter the url parameter to prevent SSRF attacks. Additionally, restrict network access to the WordPress server to only allow necessary outbound connections. Consider using a WordPress security plugin with SSRF protection capabilities. After upgrade, verify the fix by attempting to access an internal resource via the redux_p AJAX action and confirming that the request is blocked or properly handled.

Active installs

10

Plugin rating