CVE-2026-125446: WordPress Edwiser Bridge plugin <= 4.3.4 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge allows Cross Site Request Forgery.This issue affects Edwiser Bridge: from n/a through 4.3.4.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
wordpress/edwiser-bridgeto a version that resolves this vulnerability.Fixed in 4.3.5
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The attacker must be able to induce a user to interact with a crafted request, as reflected by the UI:R vector. No attacker privileges are required before exploitation.
Which deployments are affected?
Edwiser Bridge versions through 4.3.4 are affected. The provided information does not identify a configuration requirement or state that default configurations are unaffected.
What is the potential impact if exploitation succeeds?
The supplied severity vector rates confidentiality, integrity, and availability impact as high. The specific actions that can be performed through the forged request are not provided.