CVE-2026-4143

The CVE concerns the Neos Connector for Fakturama WordPress plugin. A CSRF flaw exists in all versions up to and including 0.0.14 due to missing nonce validation in the ncff_add_plugin_page() function that handles settings updates. As a result, unauthenticated attackers could modify plugin settin...

CVE-2026-4143

The Neos Connector for Fakturama plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 0.0.14. This is due to missing nonce validation in the ncffaddpluginpage function which handles settings updates. This makes it possible for unauthenticated...

PT-2026-26878

The Neos Connector for Fakturama plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 0.0.14. This is due to missing nonce validation in the ncff add plugin page function which handles settings updates. This makes it possible for unauthenticated...