A vulnerability described as problematic has been identified in Change WP URL Plugin up to 1.0 on WordPress. This affects an unknown part of the component Setting Handler. Executing a manipulation can lead to cross-site request forgery.
This vulnerability is registered as CVE-2026-1398. It is possible to launch the attack remotely. No exploit is available.