Medium · 4.3 CVE-2026-22359 EUVD-2026-3796GHSA-jp5v-2c4g-v5pm

WordPress Wordpress Movies Bulk Importer plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability

Published Jan 22, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: AA-Team Product: Wordpress Movies Bulk Importer Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability in AA-Team Wordpress Movies Bulk Importer movies importer allows Cross Site Request Forgery.This issue affects Wordpress Movies Bulk Importer: from n/a through <= 1.0.

Affected products

Vendor	Product	Affected	Fixed
AA-Team	Wordpress Movies Bulk Importer	≤ <= 1.0	—

References

https://patchstack.com/database/Wordpress/Plugin/movies%20importer/vulnerability/wordpress-wordpress-movies-bulk-importer-plugin-1-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry