A vulnerability, which was classified as problematic, was found in petjeaf Petje.af Plugin up to 2.1.8 on WordPress. This impacts the function
ajax_revoke_token. Such manipulation leads to cross-site request forgery.
This vulnerability is traded as CVE-2026-4002. The attack may be launched remotely. There is no exploit available.
