CVE-2026-125839: WordPress ElitePress theme <= 3.2.1 - Cross Site Request Forgery (CSRF) vulnerability
Published Nov 11, 2026
·Updated
Cross-Site Request Forgery (CSRF) vulnerability in webriti ElitePress elitepress allows Cross Site Request Forgery.This issue affects ElitePress: from n/a through 3.2.1.
Event History
Nov 11, 2026
CVE Published
via MITRE·01:46 PM
Data Sourced
via MITRE·01:46 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does an attacker need an account or other privileges to exploit this issue?
No. The CVSS vector indicates no privileges are required, and the attack can be carried out over the network.
2
Does exploitation require action from a victim?
Yes. The CVSS vector indicates user interaction is required, meaning a victim must perform an action for the attack to succeed.