Medium · 5.7 CVE-2026-8174 EUVD-2026-31811GHSA-v8jj-mm9h-g7fp

Cross-site Request Forgery

Published May 26, 2026 · Updated May 26, 2026 · Assigned by Zohocorp

Description

Zohocorp Zoho Mail wordpress plugin is vulnerable to Cross-Site request forgery (CSRF).

This issue affects Zoho Mail wordpress plugin versions before 1.6.2.

Vendor	Product	Affected	Fixed
Zohocorp	Zoho Mail wordpress plugin	< 1.6.2	1.6.2