PT-2026-4211 · WordPress · Aa-Team Wordpress Movies Bulk Importer

Tran Nguyen Bao Khanh

·

CVE-2026-22359

·

Publicado

2026-01-22

·

Atualizado

2026-01-22

CVSS v3.1

4.3

Média

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions AA-Team Wordpress Movies Bulk Importer versions prior to 1.1
Description The software contains a Cross-Site Request Forgery (CSRF) issue in the movies importer functionality. This allows attackers to potentially perform actions on behalf of authenticated users without their knowledge.
Recommendations Update AA-Team Wordpress Movies Bulk Importer to version 1.1 or later.

Correção

CSRF

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2026-22359

Produtos afetados

Aa-Team Wordpress Movies Bulk Importer