CVE Catalog
CVE-2026-39617
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.14%
4th percentile - higher than 4% of all known CVEs
Summary
A Cross-Site Request Forgery (CSRF) vulnerability in the Bluestreet WordPress plugin allows performing unintended actions on behalf of an administrator. An attacker can trick an administrator into performing unintended actions.
Risk Assessment
An attacker can perform operations on behalf of the administrator, such as modifying settings or adding new users.
Recommendation
Update the Bluestreet plugin to version later than 1.7.3. Implement CSRF protections.
Original NVD description (English source)
Cross-Site Request Forgery (CSRF) vulnerability in priyanshumittal Bluestreet bluestreet allows Cross Site Request Forgery.This issue affects Bluestreet: from n/a through <= 1.7.3.