Cross-Site Request Forgery in Webriti Shk Corporate Theme
CVE-2026-125849

8.8HIGH

Key Information:

Vendor

WordPress
Status
Shk Corporate
Vendor
CVE Published:
11 November 2026

What is CVE-2026-125849?

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Webriti Shk Corporate theme. This security flaw can be exploited by attackers to perform unauthorized actions on behalf of authenticated users without their consent. The affected versions of the Shk Corporate theme, ranging from n/a up to 2.4.3, provide an avenue for malicious actors to compromise the integrity of a user's session.

Affected Version(s)

Shk Corporate 0 <= 2.4.3

References

https://patchstack.com/database/wordpress/theme/shk-corpo...
vdb-entry

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

beopseong.kim | Patchstack Bug Bounty Program
.