CVE-2026-125844: WordPress vice theme <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability
Published Nov 11, 2026
·Updated
Cross-Site Request Forgery (CSRF) vulnerability in webriti vice vice allows Cross Site Request Forgery.This issue affects vice: from n/a through 1.4.
Event History
Nov 11, 2026
CVE Published
via MITRE·01:25 PM
Data Sourced
via MITRE·01:25 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which installations are affected?
The issue affects the webriti vice WordPress theme through version 1.4. The available data does not identify a fixed version.
2
Does exploitation require an authenticated WordPress account?
No. The CVSS vector lists PR:N, indicating that the attacker does not need privileges, but UI:R means they must cause a user to perform an interaction.
3
What is the potential impact of successful exploitation?
The CVSS vector indicates high impact to confidentiality, integrity, and availability. The available information does not specify which theme action or WordPress setting can be changed through the forged request.