CVE-2026-39632

OVERVIEW: CVE-2026-39632 is a Cross-Site Request Forgery vulnerability affecting ThemeGoods Grand Blog versions 3.1 and earlier. This CSRF flaw allows attackers to perform unauthorized actions on behalf of authenticated users without their knowledge or consent. SEVERITY: The vulnerability carries a MEDIUM CVSS score of 6.5, requiring network access and user interaction to exploit, but no special privileges. While integrity impact is rated as high, the attack does not compromise confidentiality or availability. The Faucet Risk Score of 35.0/100 suggests moderate organizational risk. EXPLOITATION STATUS: There is no evidence of active exploitation in the wild, as indicated by its absence from the Known Exploited Vulnerabilities catalog. The extremely low EPSS score of 0.00016 indicates minimal probability of exploitation. This vulnerability remains relatively low-priority from a threat intelligence perspective, with limited community attention.