CVE-2026-6396Disclosure

LOWCVSS 4.3 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Prioritize remediation for affected systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

The Fast & Fancy Filter – 3F plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 1.2.2. This is due to missing nonce verification in the saveFields() function, which handles the fff_save_settins AJAX action. This makes it possible for unauthenticated attackers to modify plugin filter settings, update arbitrary options, or create new filter posts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

Back to dashboard

3.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-352

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Threat summary

Public PoC and exploit tooling are both present
3 mentions across 3 observed days
Momentum state: stable

What's happening

Exploit tool or code specified in 1 signal
PoC mentioned or linked in 1 signal
Technical details provided in 2 signals
Disclosure: 2 classified signals
Peaked 2d ago at 1 mentions (2026-04-22); latest day: 1
3 total mentions across 3 days

Deep dive

Activity timeline3 mentions / 3d

Signal classification2 categories

Disclosure

266.7%

PoC

133.3%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-04-22	1	Disclosure1
2026-04-23	1	Disclosure1
2026-04-25	1	PoC1

Full discourse3 posts

Atomic Edge@atomicedgeWAF166d
PoC
https://atomicedge.io/cve-proof/cve-2026-6396-fast-fancy-filter-3f-version-1-2-2-medium-vulnerability-proof-of-concept CVE-2026-6396 #WordPress plugin #vulnerability fast-fancy-filter-3f #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge
Post summary
This tweet links to a proof‑of‑concept for CVE‑2026‑6396 affecting the Fast Fancy Filter 3f WordPress plugin. It shares exploit code but makes no claims of active exploitation, patches, or detailed technical vulnerability description.
0000028
6 followersView on X
CVE@CVEnew167d
Disclosure
CVE-2026-6396 The Fast & Fancy Filter – 3F plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 1.2.2. This is due to missing nonce verifi… https://www.cve.org/CVERecord?id=CVE-2026-6396
Post summary
The Fast & Fancy Filter 3F WordPress plugin is disclosed to have a CSRF flaw (CVE‑2026‑6396) affecting versions up to 1.2.2 due to missing nonce verification.
00000128
57.2K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds169d
Disclosure
CVE-2026-6396 Cross-Site Request Forgery in Fast & Fancy Filter WordPress Plugin Up To 1.2.2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6396
Post summary
The post announces a cross‑site request forgery issue affecting the Fast & Fancy Filter WordPress plugin up to version 1.2.2, providing a link to a vulnerability detail page.
0000046
4.0K followersView on X

Explore more

Back to dashboard