Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-66642 EUVD-2026-55261GHSA-x59x-hvff-fx38

WordPress WP Umbrella plugin 2.24.2-2.26.2 - Cross Site Request Forgery (CSRF) vulnerability

Published Aug 10, 2026 · Updated Aug 10, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in WP Umbrella allows Cross Site Request Forgery.

This issue affects WP Umbrella: from 2.24.2 through 2.26.2.

Affected products

VendorProductAffectedFixed
WP Umbrella WP Umbrella 2.24.2 – ≤ 2.26.2 —

References