Restropress (<= 3.4.11) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/restropress--3.4.11/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 11 Nov 2026 16:07:28 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgMagnigenie RestroPress: Cross-Site Request Forgery (CVE-2026-125784)https://feed.craftedsignal.io/briefs/2026-11-restropress-csrf-cve-2026-125784/Wed, 11 Nov 2026 16:07:28 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-restropress-csrf-cve-2026-125784/The Magnigenie RestroPress plugin for WordPress is affected by a Cross-Site Request Forgery (CSRF) vulnerability in versions up to 3.4.11.The Magnigenie RestroPress plugin for WordPress contains a Cross-Site Request Forgery (CSRF) vulnerability. This issue affects versions from n/a through 3.4.11.

Impact

Successful exploitation of a CSRF vulnerability allows an attacker to perform unauthorized actions on behalf of an authenticated user.

Recommendation

Users of the RestroPress plugin are advised to review the vulnerability details and monitor for vendor security updates.

]]>highadvisory