CVE-2026-8905

Name of the Vulnerable Software and Affected Versions Osiris Signature Banner versions prior to 0.6

Description The Osiris Signature Banner plugin for WordPress contains a Cross-Site Request Forgery (CSRF) flaw. This occurs because of missing or incorrect nonce validation—a security token used to ensure that a request was intentionally sent by the user—on a function. Unauthenticated attackers can exploit this by tricking a site administrator into clicking a malicious link, allowing the attacker to update settings and inject malicious web scripts via a forged request.

Recommendations Update the plugin to version 0.6 or later.