High · 8.8 CVE-2026-22342 EUVD-2026-37661GHSA-rqfr-rrp5-qpmp

WordPress WordPress Dating Theme theme <= 11.2.0 - Cross Site Request Forgery (CSRF) to Account Takeover vulnerability

Published Jun 17, 2026 · Updated Jun 17, 2026 · Assigned by Patchstack

Vendor: PremiumPress Limited. Product: WordPress Dating Theme Category: Web / CMS

Description

Unauthenticated Cross Site Request Forgery (CSRF) in WordPress Dating Theme <= 11.2.0 versions.

Affected products

Vendor	Product	Affected	Fixed
PremiumPress Limited.	WordPress Dating Theme	≤ 11.2.0	—

References

https://patchstack.com/database/wordpress/theme/da10/vulnerability/wordpress-wordpress-dating-theme-theme-11-2-0-cross-site-request-forgery-csrf-to-account-takeover-vulnerability?_s_id=cve vdb-entry