A vulnerability, which was classified as problematic, has been found in WP Plugin Info Card up to 6.2.0 on WordPress. Affected by this issue is the function
ajax_save_custom_plugin. Performing a manipulation results in cross-site request forgery.
This vulnerability is reported as CVE-2026-2023. The attack is possible to be carried out remotely. No exploit exists.
