CSRF Vulnerability in BEAR WordPress Plugin Allows Configuration Manipulation
CVE-2026-84024
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-84024?
The BEAR WordPress plugin versions earlier than 1.2.2 suffers from a CSRF vulnerability due to improper nonce verification when saving meta field configurations. This flaw permits attackers to manipulate settings by duping an authenticated administrator into visiting a malicious link, potentially leading to unauthorized changes in the plugin's configuration.
Affected Version(s)
BEAR 0 < 1.2.2
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.