High · 8.8 CVE-2026-125849 EUVD-2026-123474GHSA-c89x-556p-w88p

WordPress Shk Corporate theme <= 2.4.3 - Cross Site Request Forgery (CSRF) vulnerability

Published Nov 11, 2026 · Updated Nov 11, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in webriti Shk Corporate shk-corporate allows Cross Site Request Forgery.This issue affects Shk Corporate: from n/a through 2.4.3.

Affected products

Vendor	Product	Affected	Fixed
webriti	Shk Corporate	≤ 2.4.3	—

References

https://patchstack.com/database/wordpress/theme/shk-corporate/vulnerability/wordpress-shk-corporate-theme-2-4-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry