PT-2026-6227 · Brainstorm Force · Sigmize

Nguyen Ba Khanh · Published 2026-02-03 · Updated 2026-02-03 · CVE-2026-24962

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Brainstorm Force Sigmize versions n/a through 0.0.9

Description A Cross-Site Request Forgery (CSRF) issue exists in Brainstorm Force Sigmize sigmize, allowing attackers to perform actions on behalf of authenticated users. This occurs because the application does not adequately protect against forged requests originating from malicious websites.

Recommendations Update Brainstorm Force Sigmize to a version greater than 0.0.9.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2026-24962

Affected Products

Sigmize

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-24962 · Security Note
• https://twitter.com/CVEnew/status/2018696385382797402 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/sigmize/vulnerability/wordpress-sigmize-plugin-0-0-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note