CVE-2026-3772 | benjaminprojas WP Editor Plugin up to 1.2.9.2 on WordPress add_plugins_page/add_themes_page cross-site request forgery

A vulnerability classified as problematic has been found in benjaminprojas WP Editor Plugin up to 1.2.9.2 on WordPress. Affected by this vulnerability is the function add_plugins_page/add_themes_page. The manipulation leads to cross-site request forgery.

This vulnerability is traded as CVE-2026-3772. It is possible to initiate the attack remotely. There is no exploit available.