CVE-2026-92410

The Sign-up Sheets WordPress plugin before 2.4.0 does not properly validate the CSRF nonce that protects its sign-up deletion action, allowing attackers to delete sign-up records via a forged request handled in the session of a logged-in user with the required capability...

WordPress Sign-up Sheets plugin < 2.4.0 - Arbitrary Sign-up Deletion vulnerability

Arbitrary Sign-up Deletion vulnerability discovered by JunHee CHO in WordPress Plugin Sign-up Sheets versions 2.4.0...

CVE-2026-92410 Sign-up Sheets < 2.4.0 - Arbitrary Sign-up Deletion via CSRF

The Sign-up Sheets WordPress plugin before 2.4.0 does not properly validate the CSRF nonce that protects its sign-up deletion action, allowing attackers to delete sign-up records via a forged request handled in the session of a logged-in user with the required capability...

CVE-2026-92410

The Sign-up Sheets WordPress plugin, in versions before 2.4.0 , is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The root cause is the insufficient validation of the CSRF nonce protecting the sign-up deletion action. An attacker can exploit this by sending a forged request to delete s...

CVE-2026-92410: Cross-Site Request Forgery (CSRF)

The Sign-up Sheets WordPress plugin before 2.4.0 does not properly validate the CSRF nonce that protects its sign-up deletion action, allowing attackers to delete sign-up records via a forged request handled in the session of a logged-in user with the required capability...