CVE-2026-22342 - WordPress WordPress Dating Theme theme <= 11.2.0 - Cross Site Request Forgery (CSRF) to Account Takeover vulnerability

HIGH

WordPress WordPress Dating Theme theme <= 11.2.0 - Cross Site Request Forgery (CSRF) to Account Takeover vulnerability

Published Jun 17, 2026

8.8

HIGH

CVSS 3.1

EPSS 0.18%

Unauthenticated Cross Site Request Forgery (CSRF) in WordPress Dating Theme <= 11.2.0 versions.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
-	affected	<=11.2.0

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-37661		Advisory
https://patchstack.com/database/wordpress/theme/da10/vulnerability/wordpress-wordpress-dating-theme-theme-11-2-0-cross-site-request-forgery-csrf-to-account-takeover-vulnerability?_s_id=cve		vdb-entry