CSRF Vulnerability in Sign-up Sheets WordPress Plugin by WordPress
CVE-2026-92410
Currently unrated
Key Information:
- Vendor
WordPress
- Status
- Vendor
- CVE Published:
- 20 September 2026
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-92410?
The Sign-up Sheets WordPress plugin prior to version 2.4.0 contains a vulnerability where the CSRF nonce, which is essential for securing sign-up deletions, is not properly validated. This oversight allows attackers to exploit the system by sending forged requests through the session of a logged-in user who possesses the necessary permissions, ultimately leading to the unauthorized deletion of sign-up records.
Affected Version(s)
Sign-up Sheets 0 < 2.4.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.