CVE-2026-6451 CMS für Motorrad Werkstätten <= 1.0.0 - Cross-Site Request Forgery

🗓️ 17 Apr 2026 07:45:57Reported by WordfenceType

CVE-2026-6451: WordPress plugin up to 1.0.0 vulnerable to CSRF from missing nonce validation on eight AJAX deletions.

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2026-6451	17 Apr 202607:45	–	attackerkb
Circl	CVE-2026-6451	17 Apr 202610:27	–	circl
CNNVD	WordPress plugin cms-fuer-motorrad-werkstaetten 安全漏洞	17 Apr 202600:00	–	cnnvd
CVE	CVE-2026-6451	17 Apr 202607:45	–	cve
EUVD	EUVD-2026-23390	17 Apr 202609:31	–	euvd
NVD	CVE-2026-6451	17 Apr 202608:16	–	nvd
Patchstack	WordPress CMS für Motorrad Werkstätten plugin <= 1.0.0 - Cross-Site Request Forgery vulnerability	17 Apr 202602:20	–	patchstack
Positive Technologies	PT-2026-33422	17 Apr 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-6451	5 Jun 202619:32	–	redhatcve
Vulnrichment	CVE-2026-6451 CMS für Motorrad Werkstätten <= 1.0.0 - Cross-Site Request Forgery	17 Apr 202607:45	–	vulnrichment

[
  {
    "vendor": "tholstkabelbwde",
    "product": "Plugin: CMS für Motorrad Werkstätten",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.0.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/cms-fuer-motorrad-werkstaetten/tags/1.0.0/includes/cfmw-receipts.php
plugins	www.plugins.trac.wordpress.org/browser/cms-fuer-motorrad-werkstaetten/trunk/includes/cfmw-receipts.php
plugins	www.plugins.trac.wordpress.org/browser/cms-fuer-motorrad-werkstaetten/tags/1.0.0/includes/cfmw-settings.php
plugins	www.plugins.trac.wordpress.org/browser/cms-fuer-motorrad-werkstaetten/trunk/includes/cfmw-settings.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/6895a774-7e78-4ab2-a2b3-2a333f258778
plugins	www.plugins.trac.wordpress.org/browser/cms-fuer-motorrad-werkstaetten/trunk/includes/cfmw-stock.php
plugins	www.plugins.trac.wordpress.org/browser/cms-fuer-motorrad-werkstaetten/trunk/includes/cfmw-catalogs.php
plugins	www.plugins.trac.wordpress.org/browser/cms-fuer-motorrad-werkstaetten/trunk/includes/cfmw-vehicles.php
plugins	www.plugins.trac.wordpress.org/browser/cms-fuer-motorrad-werkstaetten/tags/1.0.0/includes/cfmw-suppliers.php
plugins	www.plugins.trac.wordpress.org/browser/cms-fuer-motorrad-werkstaetten/trunk/includes/cfmw-positions.php