anonhaven

CVE-2026-92410

NONE EPSS 0.10%
Updated Sep 20, 2026
Unknown
Parameter Value
Affected Versions before 2.4.0
Type CWE-352 Cross-Site Request Forgery (CSRF)
Vendor Unknown
Public PoC No

The Sign-up Sheets WordPress plugin before 2.4.0 does not properly validate the CSRF nonce that protects its sign-up deletion action, allowing attackers to delete sign-up records via a forged request handled in the session of a logged-in user with the required capability.

Weakness Type (CWE)

CWE-352 Cross-Site Request Forgery (CSRF)

Vulnerable Products

unknown:sign-up sheets

References 1

https://wpscan.com/vulnerability/4c217ac6-e191-4be9-becc-47cacf2b4e25/
contact@wpscan.com
Share Post Share Share Share

Related Vulnerabilities

CVE-2026-92965

Unknown

None

CVE-2026-92541

Unknown

None

CVE-2026-92540

Unknown

None

CVE-2026-92423

Unknown

None

CVE-2026-92422

Unknown

None