Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2026/02/19 7:28 a.m.1 views

CVE-2026-1072

The Keybase.io Verification plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.5. This is due to missing nonce validation when updating plugin settings. This makes it possible for unauthenticated attackers to update the Keybase verification...

4.3CVSS5.3AI score0.00007EPSS
Exploits0References1
NVD
NVD
added 2026/02/18 6:16 a.m.3 views

CVE-2026-1072

The Keybase.io Verification plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.5. This is due to missing nonce validation when updating plugin settings. This makes it possible for unauthenticated attackers to update the Keybase verification...

4.3CVSS0.00007EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/02/18 5:29 a.m.2 views

CVE-2026-1072 Keybase.io Verification <= 1.4.5 - Cross-Site Request Forgery to Settings Update

The Keybase.io Verification plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.5. This is due to missing nonce validation when updating plugin settings. This makes it possible for unauthenticated attackers to update the Keybase verification...

4.3CVSS5.3AI score0.00007EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/02/18 5:29 a.m.2 views

CVE-2026-1072

The Keybase.io Verification plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.5. This is due to missing nonce validation when updating plugin settings. This makes it possible for unauthenticated attackers to update the Keybase verification...

4.3CVSS5.3AI score0.00007EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/02/18 5:29 a.m.28 views

CVE-2026-1072 Keybase.io Verification <= 1.4.5 - Cross-Site Request Forgery to Settings Update

The Keybase.io Verification plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.5. This is due to missing nonce validation when updating plugin settings. This makes it possible for unauthenticated attackers to update the Keybase verification...

4.3CVSS0.00007EPSS
Exploits0References4
CVE
CVE
added 2026/02/18 5:29 a.m.5 views

CVE-2026-1072

CVE-2026-1072 concerns the WordPress Keybase.io Verification plugin (versions

4.3CVSS5.3AI score0.00007EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/02/18 12:0 a.m.2 views

PT-2026-20272

The Keybase.io Verification plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.5. This is due to missing nonce validation when updating plugin settings. This makes it possible for unauthenticated attackers to update the Keybase verification...

4.3CVSS5.3AI score0.00007EPSS
Exploits0References5
Patchstack
Patchstack
added 2026/02/17 11:55 p.m.4 views

WordPress Keybase.io Verification plugin <= 1.4.5 - Cross-Site Request Forgery to Settings Update vulnerability

Cross-Site Request Forgery to Settings Update vulnerability discovered by afnaan - SMKN 1 Bantul in WordPress Plugin Keybase.io Verification versions = 1.4.5...

4.3CVSS5.5AI score0.00007EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder