CVE-2021-39339: Telefication

Medium severity, CVSS 5.3. EPSS: 1.4% chance of exploitation in the next 30 days.

The Telefication WordPress plugin is vulnerable to Open Proxy and Server-Side Request Forgery via the ~/bypass.php file due to a user-supplied URL request value that gets called by a curl requests. This affects versions up to, and including, 1.8.0.

Affected products

• Telefication Telefication: up to and including 1.8.0

Published 2021-09-22. Last modified 2026-06-17.