CVE-2026-57690

Name of the Vulnerable Software and Affected Versions Werkstatt versions prior to 4.7.3

Description The Werkstatt - Creative Portfolio WordPress Theme is subject to Cross-Site Request Forgery (CSRF), a flaw where an attacker tricks a victim into executing unwanted actions on a web application in which they are currently authenticated. This occurs due to missing or incorrect nonce validation on a function. Unauthenticated attackers can perform unauthorized actions by tricking a site administrator into clicking a malicious link.

Recommendations Update to a version newer than 4.7.2.