PT-2026-31182 · Priyanshumittal · Bluestreet

Published 2026-04-08 · Updated 2026-04-12 · CVE-2026-39617

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions priyanshumittal Bluestreet versions n/a through 1.7.3

Description A Cross-Site Request Forgery (CSRF) vulnerability exists in priyanshumittal Bluestreet bluestreet, allowing attackers to perform actions on behalf of authenticated users. This is achieved through the exploitation of CSRF, where malicious requests are crafted and sent to the application.

Recommendations Update priyanshumittal Bluestreet to a version greater than 1.7.3.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2026-39617

Affected Products

Bluestreet

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-39617 · Security Note
• https://patchstack.com/database/Wordpress/Theme/bluestreet/vulnerability/wordpress-bluestreet-theme-1-7-3-cross-site-request-forgery-csrf-to-arbitrary-plugin-installation-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2043368526833233991 · Twitter Post