CVE-2026-9732 | planetshaker EmergencyWP Plugin up to 1.4.2 on WordPress Setting add_cap/remove_cap form_settings_ui cross-site request forgery

A vulnerability described as problematic has been identified in planetshaker EmergencyWP Plugin up to 1.4.2 on WordPress. This issue affects the function form_settings_ui of the file add_cap/remove_cap of the component Setting Handler. Executing a manipulation can lead to cross-site request forgery.

This vulnerability is handled as CVE-2026-9732. The attack can be executed remotely. There is not any exploit available.