What is the CVSS score of CVE-2026-65496?

CVE-2026-65496 has a CVSS 3.1 base score of 4.4 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N. EPSS exploitation probability: 0.2%.

Complianz CVE-2026-65496

EUVD-2026-48107 MEDIUM

Server-Side Request Forgery (SSRF) (CWE-918)

2026-07-23 Patchstack

GHSA-5rq9-69w6-223q

WordPress SSRF Complianz Wordpress Plugin

4.4

CVSS 3.1 · Vendor: Patchstack

Severity by source

Vendor (Patchstack) PRIMARY

4.4 MEDIUM

AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N

vuln.today AI

4.4 MEDIUM

Requires authenticated Author-level access (PR:H) and specific endpoint knowledge (AC:H); SSRF crosses server boundary (S:C) with limited read/write impact and no availability effect.

3.1 AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N

4.0 AV:N/AC:H/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:N/SA:N

Primary rating from Vendor (Patchstack).

CVSS VectorVendor: Patchstack

Attack Vector

Network

Attack Complexity

High

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 23, 2026 - 13:19 vuln.today

DescriptionCVE.org

Author Server Side Request Forgery (SSRF) in Complianz <= 7.5.0 versions.

AnalysisAI

Server-Side Request Forgery in the Complianz WordPress GDPR compliance plugin (versions 7.5.0 and below) allows authenticated attackers with Author-level privileges or higher to forge requests from the server, enabling internal network probing and limited confidentiality and integrity impact. The Scope:Changed CVSS metric confirms the vulnerability crosses the server's trust boundary, a characteristic consistent with SSRF enabling access to internal resources unreachable by the attacker directly. No public exploit code has been identified at time of analysis, and the high privilege requirement (PR:H) substantially limits opportunistic exploitation.

Technical ContextAI

Complianz is a WordPress plugin (CPE: cpe:2.3:a:complianz:complianz:*:*:*:*:*:*:*:*) designed for GDPR, CCPA, and cookie consent compliance management. The vulnerability class is CWE-918 (Server-Side Request Forgery), which occurs when the application fetches a remote resource based on user-supplied input without adequately validating or sanitizing the target URL or destination. In the context of a WordPress plugin, this typically manifests through an AJAX action or admin endpoint that performs HTTP requests to external or internal URLs derived from attacker-controlled parameters. The CVSS Scope:Changed (S:C) is technically appropriate here because a successful SSRF moves the attack surface from the web application layer into internal network infrastructure - the server issues requests on behalf of the attacker to destinations that would otherwise be inaccessible, crossing the initial security boundary.

RemediationAI

Update the Complianz WordPress plugin to a version above 7.5.0 per the Patchstack advisory at https://patchstack.com/database/wordpress/plugin/complianz-gdpr/vulnerability/wordpress-complianz-plugin-7-5-0-server-side-request-forgery-ssrf-vulnerability; an exact patched release version is not independently confirmed from the available data, so verify the current stable release in the WordPress Plugin Repository. As a compensating control where immediate patching is not possible, restrict Author-level and above accounts to trusted users only, and disable self-registration if enabled (Settings > General > Membership in WordPress), which eliminates the attacker's ability to acquire the required privilege level. Additionally, deploy a Web Application Firewall rule to block outbound server-side requests to internal RFC-1918 address ranges, reducing the SSRF blast radius. Note that WAF mitigations may interfere with legitimate plugin functionality if Complianz performs outbound connectivity checks.