WPSA-24-079
Medium Severity
CSRF to Settings Change
Vulnerability Type: Cross-Site Request Forgery (CSRF)
Published: Jul 2026
Remediation Action
Upgrade the settings handler plugin, or add check_admin_referer() nonces.
Complete details of the vulnerability report: CSRF to Settings Change (WPSA-24-079). Under our coordinated disclosure guidelines, remediation should be prioritized according to risk rating.