CVE-2026-125838: WordPress Quality theme <= 3.3 - Cross Site Request Forgery (CSRF) vulnerability

Q: Which installations are affected?

The issue affects the webriti Quality WordPress theme through version 3.3. The available data does not identify a fixed version.

Q: What does an attacker need to exploit this issue?

The CVSS vector indicates network-based exploitation with low attack complexity and no attacker privileges required, but user interaction is required. This is consistent with an attacker causing a victim to submit a forged request.

Q: What is the potential impact if exploitation succeeds?

The reported severity is high, with a CVSS score of 8.8. The vector rates confidentiality, integrity, and availability impact as high.

Published Nov 11, 2026

Updated

Cross-Site Request Forgery (CSRF) vulnerability in webriti Quality quality allows Cross Site Request Forgery.This issue affects Quality: from n/a through 3.3.

Event History

Nov 11, 2026

CVE Published

via MITRE·01:47 PM

Data Sourced

via MITRE·01:47 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which installations are affected?

The issue affects the webriti Quality WordPress theme through version 3.3. The available data does not identify a fixed version.

What does an attacker need to exploit this issue?

The CVSS vector indicates network-based exploitation with low attack complexity and no attacker privileges required, but user interaction is required. This is consistent with an attacker causing a victim to submit a forged request.

What is the potential impact if exploitation succeeds?