[MEDIUM] ProcessWire: server-side request forgery vulnerability in the admin panel's 'Add Module From URL' feature

PKSA-m19p-x1h4-xw57 CVE-2026-40500 GHSA-gmwr-9j4p-96vm

Affected package: processwire/processwire

Affected version: <=3.0.255

Reported by:
GitHub