Nicu Micle - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/vendors/nicu-micle/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 12 Nov 2026 14:16:00 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgNicu Micle Simple JWT Login: Cross-Site Request Forgery (CVE-2026-125836)https://feed.craftedsignal.io/briefs/2026-11-cve-2026-125836/Thu, 12 Nov 2026 14:16:00 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-cve-2026-125836/A Cross-Site Request Forgery (CSRF) vulnerability exists in the Nicu Micle Simple JWT Login plugin.The Nicu Micle Simple JWT Login plugin is vulnerable to Cross-Site Request Forgery (CSRF). This issue affects versions of the plugin from n/a through 3.6.8.

Impact

This vulnerability allows for Cross-Site Request Forgery. The issue carries a CVSS v3.1 base score of 8.8.

]]>highadvisory