Public permanent archive

Green Hat Security Advisories

Public vulnerability records from Green Hat Security research and coordinated disclosure.

Each advisory documents an independently verified security issue after public disclosure and connects affected products, versions, remediation guidance, researcher credit, and primary references. No login or account is required.

Security advisory archive

Showing 1 public advisory.

CVE-2026-66642

Cross-site request forgery in the WP Umbrella WordPress plugin

WP Umbrella · WP Umbrella WordPress plugin

Medium · 5.4Patched

The published record identifies a cross-site request forgery vulnerability affecting WP Umbrella versions 2.24.2 through 2.26.2. The vendor explains that exploitation required a logged-in WordPress administrator to visit a malicious page.

CWE
CWE-352
Affected
2.24.2–2.26.2
Fixed
2.27.0 or later
Published
Researcher
Anthony Green [antnation] — Green Hat Security
Status
published
Advisory ID
GH-ADV-2026-001