PT-2026-69443
CVE-2026-66642
·
Published
2026-08-10
·
Updated
2026-08-10
Description by
CVSS 3.1
5.4
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Name of the Vulnerable Software and Affected Versions
WP Umbrella versions 2.24.2 through 2.26.2
Description
A Cross-Site Request Forgery (CSRF) flaw exists in WP Umbrella. This issue allows an attacker to induce a user to perform actions they did not intend to do by tricking them into clicking a malicious link or visiting a compromised page.
Recommendations
Update WP Umbrella to a version later than 2.26.2.
Found an issue in the description? Have something to add? Feel free to write us 👾