CVE-2026-22342

Name of the Vulnerable Software and Affected Versions WordPress Dating Theme versions prior to 11.2.1

Description An unauthenticated Cross-Site Request Forgery (CSRF) issue exists due to missing or incorrect nonce validation on a function. This allows an attacker to perform unauthorized actions by tricking a site administrator into clicking a malicious link. Nonce validation is a security measure used to ensure that a request was intentionally sent by the user and not forged by a third party.

Recommendations Update WordPress Dating Theme to a version newer than 11.2.0.