Search

Find merged stories by title or summary.

CVE ID : CVE-2026-93873 Published : Sept. 18, 2026, 8:17 p. m. • 38 minutes ago Description : Cotonti through 1. 0. 0 fails to validate anti-CSRF tokens in the contact plugin submission handler, allowing attackers to forge messages. Attackers can auto-submit contact forms from attacker-controlled pages to send forged messages attributed to authenticated victims to the administrator inbox. Severity: 5.3 • MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Sep 18·CVEFeed

Read →

You've reached the end of current stories for this search.

Search

CVE-2026-93873 - Cotonti through 1.0.0 Cross-Site Request Forgery in the Contact Plugin