CVE-2026-111401: WordPress Tailored Tools plugin <= 3.0.3 - Cross Site Request Forgery (CSRF) vulnerability

Q: Which installations are affected?

Tailored Media Tailored Tools versions through 3.0.3 are affected. The available data does not identify a fixed version.

Q: Does exploitation require an attacker account or user interaction?

The CVSS vector indicates that the attacker does not need privileges, but exploitation requires user interaction. The issue is remotely reachable over the network.

Published Oct 21, 2026

Updated

Cross-Site Request Forgery (CSRF) vulnerability in Tailored Media Tailored Tools tailored-tools allows Cross Site Request Forgery.This issue affects Tailored Tools: from n/a through 3.0.3.

Affected Software

1 affected component

Tailored Media Tailored Tools<=3.0.3

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Tailored Media Tailored Tools to a version that resolves this vulnerability.
Fixed in 3.0.5

Event History

Oct 21, 2026

CVE Published

via MITRE·06:02 PM

Data Sourced

via MITRE·06:02 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Which installations are affected?

Tailored Media Tailored Tools versions through 3.0.3 are affected. The available data does not identify a fixed version.

Does exploitation require an attacker account or user interaction?

The CVSS vector indicates that the attacker does not need privileges, but exploitation requires user interaction. The issue is remotely reachable over the network.

CVE-2026-111401: WordPress Tailored Tools plugin <= 3.0.3 - Cross Site Request Forgery (CSRF) vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Which installations are affected?

Does exploitation require an attacker account or user interaction?

Company

Resources

Contact

Frequently Asked Questions

Which installations are affected?

Does exploitation require an attacker account or user interaction?