Exploit discussion active in current signal (2 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
The MotorDesk plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the motordesk_admin_home function. This makes it possible for unauthenticated attackers to update the plugin's configuration settings, including the search page URI and custom template directory path via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
CVE-2026-9724 Cross-Site Request Forgery in MotorDesk WordPress Plugin Versions Up To 1.1.2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-9724
Post summary
The source announces the discovery of a CSRF vulnerability in the MotorDesk WordPress plugin (versions up to 1.1.2) under CVE‑2026‑9724, without providing PoC, exploit code, patch details, or evidence of active exploitation.
https://atomicedge.io/cve-proof/cve-2026-9724-motordesk-version-1-1-2-medium-vulnerability-proof-of-concept CVE-2026-9724 motordesk (CVSS Score 4.3) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge #cybersec…
Post summary
A link to a proof-of-concept for CVE-2026‑9724 is provided, along with the CVSS score, but no exploit code, active exploitation, or patch details are mentioned.