Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Keybase.io Verification plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.5. This is due to missing nonce validation when updating plugin settings. This makes it possible for unauthenticated attackers to update the Keybase verification text via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-1072 The http://Keybase.io Verification plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.5. This is due to missing nonce v… https://www.cve.org/CVERecord?id=CVE-2026-1072
Post summary
Keybase.io Verification WordPress plugin up to v1.4.5 is vulnerable to CSRF due to a missing nonce, but the post provides no PoC, exploit, patch, or evidence of active exploitation.
CVE-2026-1072 Cross-Site Request Forgery in http://Keybase.io Verification WordPress Plugin https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1072
Post summary
The text announces the discovery of a CSRF vulnerability (CVE‑2026‑1072) affecting the Keybase.io Verification WordPress Plugin, but provides no exploitation details, patches, or evidence of real‑world attacks.