Cross-Site Request Forgery in Genzel Breadcrumbs Plugin for WordPress

CVE-2026-8708

What is CVE-2026-8708?

The Genzel Breadcrumbs Plugin for WordPress is affected by a Cross-Site Request Forgery vulnerability due to inadequate nonce validation in the _options_page function. This flaw allows attackers to craft deceptive requests, potentially altering the plugin's breadcrumb settings—including templates, labels, and rules—if they can convince a site administrator to execute an action like clicking a malicious link. It is crucial for users to ensure they are using the latest version of the plugin and to implement strong security measures to mitigate the risk of exploitation.

References