CVE-2026-125840: WordPress Rambo theme <= 3.0 - Cross Site Request Forgery (CSRF) vulnerability
Published Nov 11, 2026
·Updated
Cross-Site Request Forgery (CSRF) vulnerability in webriti Rambo rambo allows Cross Site Request Forgery.This issue affects Rambo: from n/a through 3.0.
Event History
Nov 11, 2026
CVE Published
via MITRE·01:44 PM
Data Sourced
via MITRE·01:44 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which installations are affected?
Rambo theme installations are affected through version 3.0. The available data does not identify a fixed version.
2
What does exploitation require?
The CVSS vector indicates an attacker can exploit the issue remotely with low attack complexity and no privileges, but user interaction is required. This is consistent with CSRF attacks that rely on a victim being induced to perform a request.
3
What is the potential impact?
The reported severity is high, with potential high impact to confidentiality, integrity, and availability. The available data does not specify which theme actions or settings can be changed through the forged request.