CVE-2026-4002

CVE-2026-4002 affects the Petje.af WordPress plugin (versions

CVE-2026-4002: Cross-Site Request Forgery (CSRF)

The Petje.af plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 2.1.8. This is due to missing nonce validation in the ajaxrevoketoken function which handles the 'petjeafdisconnect' AJAX action. The function performs destructive operations includin...