CVE-2026-125843

WordPress Spasalon theme <= 3.0 - Cross Site Request Forgery (CSRF) vulnerability

high · 8.8

Spasalon

Published Nov 11, 2026, 13:26 UTC

Description

Cross-Site Request Forgery (CSRF) vulnerability in webriti Spasalon spasalon allows Cross Site Request Forgery.This issue affects Spasalon: from n/a through 3.0.

Official CVE record Read Eden case study View source and advisories

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.