CVE-2026-125842: WordPress Wallstreet Agency theme <= 1.3.4 - Cross Site Request Forgery (CSRF) vulnerability
Published Nov 11, 2026
·Updated
Cross-Site Request Forgery (CSRF) vulnerability in webriti Wallstreet Agency wallstreet-agency allows Cross Site Request Forgery.This issue affects Wallstreet Agency: from n/a through 1.3.4.
Event History
Nov 11, 2026
CVE Published
via MITRE·01:39 PM
Data Sourced
via MITRE·01:39 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does an attacker need an account to exploit this issue?
No attacker privileges are required. Exploitation is network-reachable but requires user interaction, consistent with a victim being induced to perform an action.
2
What is the potential impact if exploitation succeeds?
The vulnerability is rated high severity with high potential impact to confidentiality, integrity, and availability. The CVSS vector indicates the impact remains within the affected security authority.