{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/webriti/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:webriti:appointment_dark:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-125850"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Appointment Dark"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["webriti"],"content_html":"\u003cp\u003eThe webriti Appointment Dark theme is vulnerable to Cross-Site Request Forgery (CSRF), as identified by CVE-2026-125850. This issue affects versions from n/a through 1.3.4.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThis vulnerability allows Cross-Site Request Forgery.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eMonitor for security updates regarding this vulnerability.\u003c/p\u003e\n","date_modified":"2026-11-11T16:15:40Z","date_published":"2026-11-11T16:15:40Z","id":"https://feed.craftedsignal.io/briefs/2026-11-cve-2026-125850/","summary":"The webriti Appointment Dark theme is affected by a Cross-Site Request Forgery (CSRF) vulnerability.","title":"webriti Appointment Dark: Cross-Site Request Forgery (CVE-2026-125850)","url":"https://feed.craftedsignal.io/briefs/2026-11-cve-2026-125850/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:webriti:leo:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-125848"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Leo"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["webriti"],"content_html":"\u003cp\u003eA Cross-Site Request Forgery (CSRF) vulnerability exists in the webriti Leo product. This issue affects Leo versions from n/a through 1.7.4.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability is associated with a CVSS v3.1 base score of 8.8.\u003c/p\u003e\n","date_modified":"2026-11-11T16:15:24Z","date_published":"2026-11-11T16:15:24Z","id":"https://feed.craftedsignal.io/briefs/2026-11-leo-csrf-cve-2026-125848/","summary":"The webriti Leo product (n/a through 1.7.4) is affected by a Cross-Site Request Forgery (CSRF) vulnerability, resulting in a CVSS v3.1 base score of 8.8.","title":"Webriti Leo: Cross-Site Request Forgery (CVE-2026-125848)","url":"https://feed.craftedsignal.io/briefs/2026-11-leo-csrf-cve-2026-125848/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:webriti:vdperanto:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-125847"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["vdperanto (n/a through 2.2)"],"_cs_severities":["medium"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["webriti"],"content_html":"\u003cp\u003eA Cross-Site Request Forgery (CSRF) vulnerability exists in the webriti vdperanto plugin. This vulnerability, tracked as CVE-2026-125847, allows an attacker to perform unauthorized actions on behalf of an authenticated user if the user is enticed to visit a malicious site or interact with a crafted link. This issue affects all versions of vdperanto from n/a through 2.2. No information regarding a patch or remediation version is currently available.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eAn attacker can trigger unauthorized actions within the webriti vdperanto application, potentially leading to administrative configuration changes or unauthorized data modification if an authenticated user interacts with the exploit payload.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAudit the installation of webriti vdperanto to determine if it is in use.\u003c/li\u003e\n\u003cli\u003eMonitor logs for unusual administrative actions originating from end-user sessions.\u003c/li\u003e\n\u003cli\u003eIf a patch becomes available from the vendor, prioritize testing and deployment in all environments using the plugin.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-11T16:15:17Z","date_published":"2026-11-11T16:15:17Z","id":"https://feed.craftedsignal.io/briefs/2026-11-vdperanto-csrf-cve-2026-125847/","summary":"A Cross-Site Request Forgery vulnerability in the webriti vdperanto application allows unauthorized actions on behalf of authenticated users.","title":"webriti vdperanto: Cross-Site Request Forgery (CVE-2026-125847)","url":"https://feed.craftedsignal.io/briefs/2026-11-vdperanto-csrf-cve-2026-125847/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:webriti:mazino:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-125846"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Mazino"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["webriti"],"content_html":"\u003cp\u003eA Cross-Site Request Forgery (CSRF) vulnerability has been identified in the webriti Mazino plugin, affecting versions from n/a through 1.1. This vulnerability allows for Cross-Site Request Forgery.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability is rated with a CVSS v3.1 base score of 8.8.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eUsers of the Mazino plugin should review their installations in light of the identified CSRF vulnerability.\u003c/p\u003e\n","date_modified":"2026-11-11T16:15:08Z","date_published":"2026-11-11T16:15:08Z","id":"https://feed.craftedsignal.io/briefs/2026-11-mazino-csrf-cve-2026-125846/","summary":"The webriti Mazino plugin contains a Cross-Site Request Forgery (CSRF) vulnerability affecting versions from n/a through 1.1.","title":"webriti Mazino: Cross-Site Request Forgery (CVE-2026-125846)","url":"https://feed.craftedsignal.io/briefs/2026-11-mazino-csrf-cve-2026-125846/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:webriti:vdequator:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-125845"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["vdequator"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["webriti"],"content_html":"\u003cp\u003eA Cross-Site Request Forgery (CSRF) vulnerability has been identified in the webriti vdequator plugin. The issue affects all versions from n/a through 1.2.7. The vulnerability has a CVSS v3.1 base score of 8.8.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability allows for Cross-Site Request Forgery.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eUsers are advised to monitor for updates from the vendor.\u003c/p\u003e\n","date_modified":"2026-11-11T16:14:58Z","date_published":"2026-11-11T16:14:58Z","id":"https://feed.craftedsignal.io/briefs/2026-11-vdequator-csrf-cve-2026-125845/","summary":"The webriti vdequator plugin is affected by a Cross-Site Request Forgery (CSRF) vulnerability (CVE-2026-125845) impacting versions from n/a through 1.2.7.","title":"webriti vdequator: Cross-Site Request Forgery (CVE-2026-125845)","url":"https://feed.craftedsignal.io/briefs/2026-11-vdequator-csrf-cve-2026-125845/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:webriti:vice:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-125844"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["vice"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["webriti"],"content_html":"\u003cp\u003eA Cross-Site Request Forgery (CSRF) vulnerability has been identified in Webriti Vice. This issue affects versions from n/a through 1.4.\u003c/p\u003e\n","date_modified":"2026-11-11T16:14:39Z","date_published":"2026-11-11T16:14:39Z","id":"https://feed.craftedsignal.io/briefs/2026-11-webriti-vice-csrf-cve-2026-125844/","summary":"The Webriti Vice product is affected by a Cross-Site Request Forgery (CSRF) vulnerability (CVE-2026-125844) with a CVSS v3.1 base score of 8.8.","title":"Webriti Vice: Cross-Site Request Forgery (CVE-2026-125844)","url":"https://feed.craftedsignal.io/briefs/2026-11-webriti-vice-csrf-cve-2026-125844/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:webriti:spasalon:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-125843"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Spasalon"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Webriti"],"content_html":"\u003cp\u003eThe Webriti Spasalon plugin contains a Cross-Site Request Forgery (CSRF) vulnerability, identified as CVE-2026-125843. This issue affects Spasalon from n/a through 3.0.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThis vulnerability carries a CVSS v3.1 base score of 8.8.\u003c/p\u003e\n","date_modified":"2026-11-11T16:14:29Z","date_published":"2026-11-11T16:14:29Z","id":"https://feed.craftedsignal.io/briefs/2026-11-webriti-spasalon-csrf-cve-2026-125843/","summary":"The Webriti Spasalon plugin is affected by a Cross-Site Request Forgery (CSRF) vulnerability.","title":"Webriti Spasalon: Cross-Site Request Forgery (CVE-2026-125843)","url":"https://feed.craftedsignal.io/briefs/2026-11-webriti-spasalon-csrf-cve-2026-125843/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:webriti:wallstreet_agency:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-125842"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Wallstreet Agency"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["webriti"],"content_html":"\u003cp\u003eThe webriti Wallstreet Agency plugin is vulnerable to Cross-Site Request Forgery (CSRF). This issue affects Wallstreet Agency versions from n/a through 1.3.4.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability has been assigned a CVSS v3.1 base score of 8.8.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eUsers should verify their version of the Wallstreet Agency plugin and monitor for security updates provided by the vendor.\u003c/p\u003e\n","date_modified":"2026-11-11T16:08:18Z","date_published":"2026-11-11T16:08:18Z","id":"https://feed.craftedsignal.io/briefs/2026-11-wallstreet-agency-csrf-cve-2026-125842/","summary":"The webriti Wallstreet Agency plugin is affected by a Cross-Site Request Forgery (CSRF) vulnerability.","title":"webriti Wallstreet Agency: Cross-Site Request Forgery (CVE-2026-125842)","url":"https://feed.craftedsignal.io/briefs/2026-11-wallstreet-agency-csrf-cve-2026-125842/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:webriti:quality:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-125838"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Quality"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["webriti"],"content_html":"\u003cp\u003eThe webriti Quality plugin for versions from n/a through 3.3 contains a Cross-Site Request Forgery (CSRF) vulnerability (CVE-2026-125838). This issue has a CVSS v3.1 base score of 8.8.\u003c/p\u003e\n","date_modified":"2026-11-11T16:07:45Z","date_published":"2026-11-11T16:07:45Z","id":"https://feed.craftedsignal.io/briefs/2026-11-quality-csrf-cve-2026-125838/","summary":"The webriti Quality plugin (from n/a through 3.3) is affected by a Cross-Site Request Forgery (CSRF) vulnerability.","title":"webriti Quality: Cross-Site Request Forgery (CVE-2026-125838)","url":"https://feed.craftedsignal.io/briefs/2026-11-quality-csrf-cve-2026-125838/"}],"language":"en","title":"CraftedSignal Threat Feed - Webriti","version":"https://jsonfeed.org/version/1.1"}