CVE-2026-1072

CVE-2026-1072 describes a Cross-Site Request Forgery (CSRF) vulnerability in the Keybase.io Verification plugin for WordPress, affecting all versions up to and including 1.4.5. This flaw stems from a lack of nonce validation during plugin settings updates. An unauthenticated attacker could exploit this by tricking a site administrator into clicking a malicious link, thereby updating the Keybase verification text. The vulnerability has a CVSS score of 4.3 (MEDIUM), indicating a network-based attack with low attack complexity requiring user interaction, resulting in low integrity impact. While the EPSS score is low, suggesting a low probability of exploitation, its FAUCET Risk Score is 73/100. Currently, there is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. The CVE has also received minimal community discussion and media coverage, suggesting a low level of public awareness or attention.