Vulnerability Summary CVE-ID: Not specified CVSS Score: 4.3 (Medium) Publicly Published: February 6, 2026 Last Updated: February 7, 2026 Researcher: afnaan - SMKN 1 Bantul Software Type: Plugin Software Slug: title-animator Patched?: No Remediation: No known patch available. Consider uninstalling the affected software and finding a replacement. Affected Version: <= 1.0 Description The TITLE ANIMATOR plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.0. This is due to missing nonce validation. Additional Notes The vulnerability details are subject to copyright. The record contains material that is subject to copyright. For more information, contact wfi-support@wordfence.com.