CVE-2026-66642

MediumCVSS 5.4

Published: 10/08/2026(UTC)Updated: 12/08/2026(UTC)Translated: 10/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.10%

1th percentile - higher than 1% of all known CVEs

Summary

A CSRF vulnerability in WP Umbrella from 2.24.2 through 2.26.2 allows an attacker to perform unauthorized actions on behalf of an authenticated user.

Risk Assessment

An attacker can perform unwanted operations in the context of a logged-in administrator, such as changing settings.

Recommendation

Update WP Umbrella to a version newer than 2.26.2.

Original NVD description (English source)

Cross-Site Request Forgery (CSRF) vulnerability in WP Umbrella allows Cross Site Request Forgery. This issue affects WP Umbrella: from 2.24.2 through 2.26.2.