VYPR

Mcatfilter

by WordPress

Source repositories

CVEs (1)

  • CVE-2026-4139MedApr 22, 2026
    risk 0.28cvss 4.3epss 0.00

    The mCatFilter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 0.5.2. This is due to the complete absence of nonce verification and capability checks in the compute_post() function, which processes settings updates. The…