Description
Unauthenticated Cross Site Request Forgery (CSRF) in WP Migrate Lite <= 2.7.8 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WP Engine | WP Migrate Lite | ≤ 2.7.8 | — |
Medium · 4.7
CVE-2026-49043
EUVD-2026-36867GHSA-vfjr-4w5j-4jph
WordPress WP Migrate Lite plugin <= 2.7.8 - Cross Site Request Forgery (CSRF) vulnerability
Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack