PT-2026-4213 · WordPress+1 · Pawfriends - Pet Shop/Veterinary Wordpress Theme+1

Tran Nguyen Bao Khanh · Publicado 2026-01-22 · Atualizado 2026-01-22 · CVE-2026-22382

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Mikado-Themes PawFriends - Pet Shop and Veterinary WordPress Theme versions through 1.3

Description The PawFriends - Pet Shop and Veterinary WordPress Theme contains a Cross-Site Request Forgery (CSRF) issue. This allows an attacker to potentially perform actions on behalf of an authenticated user without their knowledge. CSRF occurs when a malicious web site, email, or program is able to trick a user’s browser into performing an unwanted action on a trusted site when the user is authenticated.

Recommendations Versions prior to and including 1.3 are affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2026-22382

Produtos afetados

Mikado-Themes Pawfriends

Pawfriends - Pet Shop/Veterinary Wordpress Theme

Referências · 3

• https://twitter.com/CVEnew/status/2014383074813858118 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-22382 · Nota de Segurança
• https://patchstack.com/database/Wordpress/Theme/pawfriends/vulnerability/wordpress-pawfriends-pet-shop-and-veterinary-wordpress-theme-theme-1-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Nota