PT-2026-25190 · Magazine3 · Easy Table Of Contents

Mike Montoya · Publicado 2026-03-13 · Atualizado 2026-03-15 · CVE-2026-32343

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Magazine3 Easy Table of Contents versions through 2.0.80

Description The software contains a Cross-Site Request Forgery (CSRF) flaw. This allows attackers to potentially perform actions on behalf of authenticated users.

Recommendations Versions prior to 2.0.80 should be updated.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2026-32343

Produtos afetados

Easy Table Of Contents

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-32343 · Nota de Segurança
• https://twitter.com/CVEnew/status/2032998281425437000 · Publicação no Twitter
• https://patchstack.com/database/Wordpress/Plugin/easy-table-of-contents/vulnerability/wordpress-easy-table-of-contents-plugin-2-0-80-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Nota