CVE-2026-111401
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
The Tailored Tools plugin for WordPress contains a Cross-Site Request Forgery (CSRF) vulnerability that allows forcing unintended actions on behalf of a logged-in user. This issue affects Tailored Tools versions up to and including 3.0.3.
Risk Assessment
An attacker could trick an administrator into performing unintended operations in the WordPress admin panel, potentially leading to configuration changes or site takeover.
Recommendation
Update the Tailored Tools plugin to a version later than 3.0.3 and consider additional server-side CSRF protections.
Other vulnerabilities in Tailored Tools
See all- CVE-2026-62025Critical
The Tailored Tools plugin in versions up to and including 3.0.3 contains an unauthenticated arbitrary file upload vulnerability. The lack of required authorization allows exploitation without an account in the application.
- CVE-2026-81765High
An unauthenticated Cross Site Scripting (XSS) vulnerability in Tailored Tools versions up to and including 3.0.2.
Original NVD description (English source)
Cross-Site Request Forgery (CSRF) vulnerability in Tailored Media Tailored Tools tailored-tools allows Cross Site Request Forgery.This issue affects Tailored Tools: from n/a through 3.0.3.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS