CVE-2026-39617 - Vulnerability Analysis

Overview

priyanshumittal Bluestreet <= 1.7.3 contains a cross site request forgery vulnerability caused by lack of proper request validation, letting attackers perform unauthorized actions via forged requests, exploit requires victim interaction.

Severity & Score

Impact

Attackers can perform unauthorized actions on behalf of authenticated users, potentially compromising user accounts or data.

Mitigation

Update to the latest version beyond 1.7.3.

References

• https://patchstack.com/database/Wordpress/Theme/bluestreet/vulnerability/wordpress-bluestreet-theme-1-7-3-cross-site-request-forgery-csrf-to-arbitrary-plugin-installation-vulnerability?_s_id=cve

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner