CVE-2026-1072

Name of the Vulnerable Software and Affected Versions Keybase.io Verification plugin for WordPress versions through 1.4.5

Description The software is susceptible to Cross-Site Request Forgery (CSRF) due to the absence of nonce validation when updating plugin settings. This allows unauthenticated attackers to modify the Keybase verification text by forging a request, provided they can trick a site administrator into performing an action, such as clicking a link.

Recommendations Update the Keybase.io Verification plugin for WordPress to a version later than 1.4.5.