The Inquiry Cart and mCatFilter WordPress plugins are vulnerable to Cross-Site Request Forgery due to missing nonce verification in their respective functions.

Cybersecurity WordpressApr 22, 2026score 0.172 posts · 0 replies across 1 instances

The thread reports two separate vulnerabilities in WordPress plugins, both related to Cross-Site Request Forgery (CSRF) issues. These vulnerabilities affect specific versions of the Inquiry Cart and mCatFilter plugins, highlighting security risks in WordPress plugin development.

Claims

Parent: CybersecurityEntity: WordPress pluginsSub-entity: Inquiry Cart and mCatFilterImpact: negativeDate: Apr 22, 2026Target: The security of WordPress plugins

Source posts

@[email protected]

🚨 EUVD-2026-24680

📊 Score: 4.3/10 (CVSS v3.1)
📦 Product: mCatFilter
🏢 Vendor: chsxf
📅 Updated: 2026-04-22

📝 The mCatFilter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 0.5.2. This is due to the complete absence of nonce verification and capability checks in the compute_post() function, which processes settin...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24680

#cybersecurity #infosec #euvd #cve #vulnerability

1 boosts · 0 favs · 0 replies · Apr 22, 2026

#cybersecurity#infosec#euvd#cve#vulnerability

@[email protected]

🚨 EUVD-2026-24656

📊 Score: 6.1/10 (CVSS v3.1)
📦 Product: Inquiry cart
🏢 Vendor: ravster
📅 Updated: 2026-04-22

📝 The Inquiry Cart plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.4.2. This is due to missing nonce verification in the rd_ic_settings_page function when processing settings form submissions. This ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24656

#cybersecurity #infosec #euvd #cve #vulnerability

1 boosts · 0 favs · 0 replies · Apr 22, 2026

#cybersecurity#infosec#euvd#cve#vulnerability