{"uuid": "5df7bbb5-7545-4788-a96c-088890dbfb06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3576", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/wp_planyo_lfi_cve_2026_3576.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"sinn3r \", \"Balachandar Gowrisankar\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a Server Side Request Forgery (SSRF) vulnerability in Wordpress's Planyo Online Reservation System v3.0 or less.\\n          The plugin's AJAX proxy ulap.php does not require authentication and does not validate URL scheme supplied via ulap_url parameter.\\n          This allows unauthenticated attackers to supply file:// URLs to ulap.php and retrieve local files from the system.\", \"disclosure_date\": \"2026-07-10\", \"fullname\": \"auxiliary/gather/wp_planyo_lfi_cve_2026_3576\", \"is_install_path\": true, \"mod_time\": \"2026-08-25 15:02:08 +0000\", \"name\": \"Wordpress Planyo Online Reservation System Arbitrary File Read (CVE-2026-3576)\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/auxiliary/gather/wp_planyo_lfi_cve_2026_3576.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"gather/wp_planyo_lfi_cve_2026_3576\", \"references\": [\"CVE-2026-3576\", \"GHSA-jjq9-3x6f-75pj\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:23.548926Z"}