CVE-2026-39728: WordPress Instapage Plugin plugin <= 3.7.2 - Server Side Request Forgery (SSRF) vulnerability

Q: Who can exploit this issue?

The vulnerability is unauthenticated and remotely reachable, so an attacker does not need a WordPress account or user interaction to attempt exploitation.

Q: Which installations are affected?

Instapage Plugin versions 3.7.2 and earlier are identified as affected. The provided information does not state whether any particular WordPress configuration or deployment setting is required.

Q: What could exploitation allow?

This is an SSRF vulnerability, meaning an attacker may be able to cause the affected server to make requests. The provided data rates confidentiality and integrity impact as low and does not identify specific internal services or data that could be reached.

Published Oct 6, 2026

Updated

Unauthenticated Server Side Request Forgery (SSRF) in Instapage Plugin <= 3.7.2 versions.

Affected Software

1 affected component

WordPress Instapage Plugin<=3.7.2

Event History

Oct 6, 2026

CVE Published

via MITRE·08:34 AM

Data Sourced

via MITRE·08:34 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The vulnerability is unauthenticated and remotely reachable, so an attacker does not need a WordPress account or user interaction to attempt exploitation.

Which installations are affected?

Instapage Plugin versions 3.7.2 and earlier are identified as affected. The provided information does not state whether any particular WordPress configuration or deployment setting is required.

What could exploitation allow?

This is an SSRF vulnerability, meaning an attacker may be able to cause the affected server to make requests. The provided data rates confidentiality and integrity impact as low and does not identify specific internal services or data that could be reached.

CVE-2026-39728: WordPress Instapage Plugin plugin <= 3.7.2 - Server Side Request Forgery (SSRF) vulnerability

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

Which installations are affected?

What could exploitation allow?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which installations are affected?

What could exploitation allow?