CVE-2026-125846: WordPress Mazino theme <= 1.1 - Cross Site Request Forgery (CSRF) vulnerability

Q: What must an attacker do to exploit this issue?

The victim must interact with attacker-controlled content, as indicated by the UI:R vector. The attacker does not need prior privileges and can attempt exploitation over the network.

Q: Which installations may be affected?

Mazino versions through 1.1 are listed as affected. The available data does not state whether any particular configuration or feature must be enabled.

Q: What is the potential impact if exploitation succeeds?

Successful exploitation may result in high impact to confidentiality, integrity, and availability, according to the CVSS vector.

Published Nov 11, 2026

Updated

Cross-Site Request Forgery (CSRF) vulnerability in webriti Mazino mazino allows Cross Site Request Forgery.This issue affects Mazino: from n/a through 1.1.

Event History

Nov 11, 2026

CVE Published

via MITRE·01:23 PM

Data Sourced

via MITRE·01:23 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What must an attacker do to exploit this issue?

The victim must interact with attacker-controlled content, as indicated by the UI:R vector. The attacker does not need prior privileges and can attempt exploitation over the network.

Which installations may be affected?

Mazino versions through 1.1 are listed as affected. The available data does not state whether any particular configuration or feature must be enabled.

What is the potential impact if exploitation succeeds?

Successful exploitation may result in high impact to confidentiality, integrity, and availability, according to the CVSS vector.

CVE-2026-125846: WordPress Mazino theme <= 1.1 - Cross Site Request Forgery (CSRF) vulnerability

Event History

Frequently Asked Questions

What must an attacker do to exploit this issue?

Which installations may be affected?

What is the potential impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

What must an attacker do to exploit this issue?

Which installations may be affected?

What is the potential impact if exploitation succeeds?