CVE-2026-125841

Heroic CSRF in theme lets attackers trigger unwanted actions

high · 8.8

Heroic

Published Nov 11, 2026, 13:44 UTC

Description

Cross-Site Request Forgery (CSRF) vulnerability in webriti Heroic heroic allows Cross Site Request Forgery.This issue affects Heroic: from n/a through 1.4.2.

Official CVE record Read Eden case study View source and advisories

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.