CVE-2026-122675— WordPress Wp Social plugin <= 3.2.3 - Cross Site Request Forgery (CSRF) vulnerability

Quick assessment

Copy summary Copy citation

Affected

Wpmet Wp Social

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Wpmet Wp Social（wp-social）插件存在跨站请求伪造（CSRF）漏洞。该漏洞影响 Wp Social 插件的版本范围：从未知版本至 3.2.3。

CVE-2026-122675 affects Wpmet Wp Social. No confirmed in-the-wild exploitation; assess based on exposure. Wpmet Wp Social（wp-social）插件存在跨站请求伪造（CSRF）漏洞。该漏洞影响 Wp Social 插件的版本范围：从未知版本至 3.2.3。 CVE-2026-122675 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2026-122675

I. Basic Information for CVE-2026-122675

Affected Products

II. Public POCs for CVE-2026-122675

III. Intelligence Information for CVE-2026-122675

Other References for CVE-2026-122675 (1)

• https://patchstack.com/database/wordpress/plugin/wp-social/vulnerability/wordpress-wp-social-plugin-3-2-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry

• https://www.cve.org/CVERecord?id=CVE-2026-122675

IV. Related Vulnerabilities