Medium · 5.4 CVE-2026-121770 EUVD-2026-123383GHSA-7hr3-c4m2-v35m

WordPress VISeek plugin <= 1.0.5 - Cross Site Request Forgery (CSRF) vulnerability

Published Nov 11, 2026 · Updated Nov 11, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in VillaTheme VISeek viseek-easy-custom-search allows Cross Site Request Forgery.This issue affects VISeek: from n/a through 1.0.5.

Affected products

Vendor	Product	Affected	Fixed
VillaTheme	VISeek	≤ 1.0.5	—

References

https://patchstack.com/database/wordpress/plugin/viseek-easy-custom-search/vulnerability/wordpress-viseek-plugin-1-0-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry