CVE-2026-1076

Name of the Vulnerable Software and Affected Versions Star Review Manager plugin for WordPress versions up to and including 1.2.2

Description The Star Review Manager plugin for WordPress is susceptible to Cross-Site Request Forgery due to the absence of nonce validation on the settings page. This allows unauthenticated attackers to modify the plugin’s CSS settings by forging requests, provided they can deceive a site administrator into performing an action, such as clicking a link.

Recommendations Update the Star Review Manager plugin to a version newer than 1.2.2.