Live › vulnerability › CVE-2026-111401
Go to dashboardTailored Tools by Tailored Media has a cross-site request forgery flaw in versions through 3.0.3. A logged-in administrator who opens a malicious page could be tricked into making changes on the site.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running Tailored Tools version 3.0.3 or earlier are affected. Exposure depends on a logged-in privileged user visiting an attacker-controlled page; sites without the plugin installed can skip it. The sources do not list a patched version.
No product ranges from the sources yet.
wp plugin get tailored-tools --field=versionUnknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Cross-Site Request Forgery (CSRF) vulnerability in Tailored Media Tailored Tools tailored-tools allows Cross Site Request Forgery.This issue affects Tailored Tools: from n/a through 3.0.3.
This page as .md · .json · in your agent: get_signal("CVE-2026-111401")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.