CVE-2026-62139 WordPress Site Kit by Google plugin <= 1.186.0 - Cross Site Request Forgery (CSRF) vulnerability

Unauthenticated Cross Site Request Forgery CSRF in Site Kit by Google = 1.186.0 versions...

Malicious code in googlesitekit-api (npm)

The package googlesitekit-api was found to contain malicious code...