Skip to content
OpenAdvisories
High · 8.8 CVE-2026-39621 EUVD-2026-20263GHSA-pgqw-m834-qpv3

WordPress SpicePress theme <= 2.3.2.5 - CSRF to Arbitrary Plugin Installation vulnerability

Published Apr 8, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack