Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The MimeTypes Link Icons plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.2.20. This is due to the plugin making outbound HTTP requests to user-controlled URLs without proper validation when the "Show file size" option is enabled. This makes it possible for authenticated attackers, with Contributor-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services via crafted links in post content.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE Alert: CVE-2026-1313 - eagerterrier - MimeTypes Link Icons - https://www.redpacketsecurity.com/cve-alert-cve-2026-1313-eagerterrier-mimetypes-link-icons/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-1313 #eagerterrier #mimetypes-link-icons
Post summary
The tweet announces CVE-2026-1313 and links to a security alert page, but does not provide PoC, exploit details, patches, or technical specifics.
🟠 CVE-2026-1313 - High The MimeTypes Link Icons plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.2.20. This is due to the plugin making outbound HTTP requests... https://www.thehackerwire.com/vulnerability/CVE-2026-1313/ https://t.co/aJYLgwHvfj
Post summary
The post announces that the MimeTypes Link Icons WordPress plugin has an SSRF vulnerability in all versions through 3.2.20, providing basic technical details and a link to a vulnerability report.
CVE-2026-1313 The MimeTypes Link Icons plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.2.20. This is due to the plugin makin… https://www.cve.org/CVERecord?id=CVE-2026-1313
Post summary
The post discloses that the MimeTypes Link Icons plugin for WordPress is vulnerable to SSRF in all versions up to 3.2.20, pointing to the CVE record for reference.