Webriti - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/vendors/webriti/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 11 Nov 2026 16:15:40 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgwebriti Appointment Dark: Cross-Site Request Forgery (CVE-2026-125850)https://feed.craftedsignal.io/briefs/2026-11-cve-2026-125850/Wed, 11 Nov 2026 16:15:40 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-cve-2026-125850/The webriti Appointment Dark theme is affected by a Cross-Site Request Forgery (CSRF) vulnerability.The webriti Appointment Dark theme is vulnerable to Cross-Site Request Forgery (CSRF), as identified by CVE-2026-125850. This issue affects versions from n/a through 1.3.4.

Impact

This vulnerability allows Cross-Site Request Forgery.

Recommendation

Monitor for security updates regarding this vulnerability.

]]>highadvisoryWebriti Leo: Cross-Site Request Forgery (CVE-2026-125848)https://feed.craftedsignal.io/briefs/2026-11-leo-csrf-cve-2026-125848/Wed, 11 Nov 2026 16:15:24 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-leo-csrf-cve-2026-125848/The webriti Leo product (n/a through 1.7.4) is affected by a Cross-Site Request Forgery (CSRF) vulnerability, resulting in a CVSS v3.1 base score of 8.8.A Cross-Site Request Forgery (CSRF) vulnerability exists in the webriti Leo product. This issue affects Leo versions from n/a through 1.7.4.

Impact

The vulnerability is associated with a CVSS v3.1 base score of 8.8.

]]>criticaladvisorywebriti vdperanto: Cross-Site Request Forgery (CVE-2026-125847)https://feed.craftedsignal.io/briefs/2026-11-vdperanto-csrf-cve-2026-125847/Wed, 11 Nov 2026 16:15:17 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-vdperanto-csrf-cve-2026-125847/A Cross-Site Request Forgery vulnerability in the webriti vdperanto application allows unauthorized actions on behalf of authenticated users.A Cross-Site Request Forgery (CSRF) vulnerability exists in the webriti vdperanto plugin. This vulnerability, tracked as CVE-2026-125847, allows an attacker to perform unauthorized actions on behalf of an authenticated user if the user is enticed to visit a malicious site or interact with a crafted link. This issue affects all versions of vdperanto from n/a through 2.2. No information regarding a patch or remediation version is currently available.

Impact

An attacker can trigger unauthorized actions within the webriti vdperanto application, potentially leading to administrative configuration changes or unauthorized data modification if an authenticated user interacts with the exploit payload.

Recommendation

  • Audit the installation of webriti vdperanto to determine if it is in use.
  • Monitor logs for unusual administrative actions originating from end-user sessions.
  • If a patch becomes available from the vendor, prioritize testing and deployment in all environments using the plugin.
]]>mediumadvisorywebriti Mazino: Cross-Site Request Forgery (CVE-2026-125846)https://feed.craftedsignal.io/briefs/2026-11-mazino-csrf-cve-2026-125846/Wed, 11 Nov 2026 16:15:08 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-mazino-csrf-cve-2026-125846/The webriti Mazino plugin contains a Cross-Site Request Forgery (CSRF) vulnerability affecting versions from n/a through 1.1.A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the webriti Mazino plugin, affecting versions from n/a through 1.1. This vulnerability allows for Cross-Site Request Forgery.

Impact

The vulnerability is rated with a CVSS v3.1 base score of 8.8.

Recommendation

Users of the Mazino plugin should review their installations in light of the identified CSRF vulnerability.

]]>highadvisorywebriti vdequator: Cross-Site Request Forgery (CVE-2026-125845)https://feed.craftedsignal.io/briefs/2026-11-vdequator-csrf-cve-2026-125845/Wed, 11 Nov 2026 16:14:58 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-vdequator-csrf-cve-2026-125845/The webriti vdequator plugin is affected by a Cross-Site Request Forgery (CSRF) vulnerability (CVE-2026-125845) impacting versions from n/a through 1.2.7.A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the webriti vdequator plugin. The issue affects all versions from n/a through 1.2.7. The vulnerability has a CVSS v3.1 base score of 8.8.

Impact

The vulnerability allows for Cross-Site Request Forgery.

Recommendation

Users are advised to monitor for updates from the vendor.

]]>highadvisoryWebriti Vice: Cross-Site Request Forgery (CVE-2026-125844)https://feed.craftedsignal.io/briefs/2026-11-webriti-vice-csrf-cve-2026-125844/Wed, 11 Nov 2026 16:14:39 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-webriti-vice-csrf-cve-2026-125844/The Webriti Vice product is affected by a Cross-Site Request Forgery (CSRF) vulnerability (CVE-2026-125844) with a CVSS v3.1 base score of 8.8.<p>A Cross-Site Request Forgery (CSRF) vulnerability has been identified in Webriti Vice. This issue affects versions from n/a through 1.4.</p> highadvisoryWebriti Spasalon: Cross-Site Request Forgery (CVE-2026-125843)https://feed.craftedsignal.io/briefs/2026-11-webriti-spasalon-csrf-cve-2026-125843/Wed, 11 Nov 2026 16:14:29 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-webriti-spasalon-csrf-cve-2026-125843/The Webriti Spasalon plugin is affected by a Cross-Site Request Forgery (CSRF) vulnerability.The Webriti Spasalon plugin contains a Cross-Site Request Forgery (CSRF) vulnerability, identified as CVE-2026-125843. This issue affects Spasalon from n/a through 3.0.

Impact

This vulnerability carries a CVSS v3.1 base score of 8.8.

]]>highadvisorywebriti Wallstreet Agency: Cross-Site Request Forgery (CVE-2026-125842)https://feed.craftedsignal.io/briefs/2026-11-wallstreet-agency-csrf-cve-2026-125842/Wed, 11 Nov 2026 16:08:18 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-wallstreet-agency-csrf-cve-2026-125842/The webriti Wallstreet Agency plugin is affected by a Cross-Site Request Forgery (CSRF) vulnerability.The webriti Wallstreet Agency plugin is vulnerable to Cross-Site Request Forgery (CSRF). This issue affects Wallstreet Agency versions from n/a through 1.3.4.

Impact

The vulnerability has been assigned a CVSS v3.1 base score of 8.8.

Recommendation

Users should verify their version of the Wallstreet Agency plugin and monitor for security updates provided by the vendor.

]]>highadvisorywebriti Quality: Cross-Site Request Forgery (CVE-2026-125838)https://feed.craftedsignal.io/briefs/2026-11-quality-csrf-cve-2026-125838/Wed, 11 Nov 2026 16:07:45 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-quality-csrf-cve-2026-125838/The webriti Quality plugin (from n/a through 3.3) is affected by a Cross-Site Request Forgery (CSRF) vulnerability.<p>The webriti Quality plugin for versions from n/a through 3.3 contains a Cross-Site Request Forgery (CSRF) vulnerability (CVE-2026-125838). This issue has a CVSS v3.1 base score of 8.8.</p> highadvisory