CVE-2026-57786 — WordPress WorkScout-Core plugin <= 1.7.08 - Cross Site Request Forgery (CSRF) to Broken Authentication vulnerability

CVE-2026-57786

WordPress WorkScout-Core plugin <= 1.7.08 - Cross Site Request Forgery (CSRF) to Broken Authentication vulnerability PUBLISHED

Description (CNA)

Cross-Site Request Forgery (CSRF) vulnerability in purethemes WorkScout-Core workscout-core allows Authentication Bypass.This issue affects WorkScout-Core: from n/a through <= 1.7.08.

Affected (CNA)

Vendor / product	Versions
purethemes / WorkScout-Core	affected 0 through 1.7.08

CWE

CWE-352

References

https://patchstack.com/database/Wordpress/Plugin/workscout-core/vulnerability/wordpress-workscout-core-plugin-1-7-08-cross-site-request-forgery-csrf-to-broken-authentication-vulnerability?_s_id=cve

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.