Magnigenie RestroPress: Cross-Site Request Forgery (CVE-2026-125784)
The Magnigenie RestroPress plugin for WordPress is affected by a Cross-Site Request Forgery (CSRF) vulnerability in versions up to 3.4.11.
CVE search metadata
CVE search record: CVE-2026-125784. Severity: high. CVSS: 8.8. KEV: no. Product: restropress (<= 3.4.11). Brief: Magnigenie RestroPress: Cross-Site Request Forgery (CVE-2026-125784). Brief link: https://feed.craftedsignal.io/briefs/2026-11-restropress-csrf-cve-2026-125784/
Triage facts
Revision 1- Applicability
- restropress (<= 3.4.11)
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 11, 16:07 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
The Magnigenie RestroPress plugin for WordPress contains a Cross-Site Request Forgery (CSRF) vulnerability. This issue affects versions from n/a through 3.4.11.
Impact
Successful exploitation of a CSRF vulnerability allows an attacker to perform unauthorized actions on behalf of an authenticated user.
Recommendation
Users of the RestroPress plugin are advised to review the vulnerability details and monitor for vendor security updates.