CVE-2026-125847: WordPress vdperanto theme <= 2.2 - Cross Site Request Forgery (CSRF) vulnerability

Q: What must an attacker do to exploit this issue?

The attack vector is network-based and requires user interaction. An attacker would need to cause a user to interact with a crafted request, consistent with CSRF exploitation.

Q: Does exploitation require an authenticated account or other privileges?

No privileges are required according to the CVSS vector (PR:N). The provided data does not specify which user actions or site functions can be triggered.

Q: Which installations may be affected?

The issue affects the vdperanto WordPress theme through version 2.2. The available data does not state whether a default configuration is affected or identify a fixed version.

Published Nov 11, 2026

Updated

Cross-Site Request Forgery (CSRF) vulnerability in webriti vdperanto vdperanto allows Cross Site Request Forgery.This issue affects vdperanto: from n/a through 2.2.

Event History

Nov 11, 2026

CVE Published

via MITRE·01:23 PM

Data Sourced

via MITRE·01:23 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What must an attacker do to exploit this issue?

The attack vector is network-based and requires user interaction. An attacker would need to cause a user to interact with a crafted request, consistent with CSRF exploitation.

Does exploitation require an authenticated account or other privileges?

No privileges are required according to the CVSS vector (PR:N). The provided data does not specify which user actions or site functions can be triggered.

Which installations may be affected?

The issue affects the vdperanto WordPress theme through version 2.2. The available data does not state whether a default configuration is affected or identify a fixed version.

CVE-2026-125847: WordPress vdperanto theme <= 2.2 - Cross Site Request Forgery (CSRF) vulnerability

Event History

Frequently Asked Questions

What must an attacker do to exploit this issue?

Does exploitation require an authenticated account or other privileges?

Which installations may be affected?

Company

Resources

Contact

Frequently Asked Questions

What must an attacker do to exploit this issue?

Does exploitation require an authenticated account or other privileges?

Which installations may be affected?