CVE-2026-66642: Wp Umbrella

Medium severity, CVSS 5.4. EPSS: 0.1% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability in WP Umbrella allows Cross Site Request Forgery. This issue affects WP Umbrella: from 2.24.2 through 2.26.2.

Affected products

• Wp Umbrella Wp Umbrella: from 2.24.2, up to and including 2.26.2

Published 2026-08-10. Last modified 2026-08-12.