{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-4091", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2026-03-12T21:16:13.890Z", "datePublished": "2026-04-15T08:28:15.602Z", "dateUpdated": "2026-04-15T15:48:59.579Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-15T08:28:15.602Z"}, "affected": [{"vendor": "faridsaniee", "product": "OPEN-BRAIN", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "0.5.0", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The OPEN-BRAIN plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.5.0. This is due to missing nonce verification on the settings form in the func_page_main() function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."}], "title": "OPEN-BRAIN <= 0.5.0 - Cross-Site Request Forgery", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/93df6480-9bb1-4f5d-bb39-ff1a01d739cf?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/open-brain/trunk/index.php#L272"}, {"url": "https://plugins.trac.wordpress.org/browser/open-brain/tags/0.5.0/index.php#L272"}, {"url": "https://plugins.trac.wordpress.org/browser/open-brain/trunk/index.php#L252"}, {"url": "https://plugins.trac.wordpress.org/browser/open-brain/tags/0.5.0/index.php#L252"}, {"url": "https://plugins.trac.wordpress.org/browser/open-brain/trunk/index.php#L253"}, {"url": "https://plugins.trac.wordpress.org/browser/open-brain/tags/0.5.0/index.php#L253"}, {"url": "https://plugins.trac.wordpress.org/browser/open-brain/trunk/index.php#L237"}, {"url": "https://plugins.trac.wordpress.org/browser/open-brain/tags/0.5.0/index.php#L237"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-352 Cross-Site Request Forgery (CSRF)", "cweId": "CWE-352", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "baseScore": 6.1, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "Muhammad Nur Ibnu Hubab"}], "timeline": [{"time": "2026-04-14T19:46:41.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-15T15:48:50.884671Z", "id": "CVE-2026-4091", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-15T15:48:59.579Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-4091", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-15T15:48:50.884671Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-15T15:48:56.744Z"}}], "cna": {"title": "OPEN-BRAIN <= 0.5.0 - Cross-Site Request Forgery", "credits": [{"lang": "en", "type": "finder", "value": "Muhammad Nur Ibnu Hubab"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 6.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}}], "affected": [{"vendor": "faridsaniee", "product": "OPEN-BRAIN", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "0.5.0"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2026-04-14T19:46:41.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/93df6480-9bb1-4f5d-bb39-ff1a01d739cf?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/open-brain/trunk/index.php#L272"}, {"url": "https://plugins.trac.wordpress.org/browser/open-brain/tags/0.5.0/index.php#L272"}, {"url": "https://plugins.trac.wordpress.org/browser/open-brain/trunk/index.php#L252"}, {"url": "https://plugins.trac.wordpress.org/browser/open-brain/tags/0.5.0/index.php#L252"}, {"url": "https://plugins.trac.wordpress.org/browser/open-brain/trunk/index.php#L253"}, {"url": "https://plugins.trac.wordpress.org/browser/open-brain/tags/0.5.0/index.php#L253"}, {"url": "https://plugins.trac.wordpress.org/browser/open-brain/trunk/index.php#L237"}, {"url": "https://plugins.trac.wordpress.org/browser/open-brain/tags/0.5.0/index.php#L237"}], "descriptions": [{"lang": "en", "value": "The OPEN-BRAIN plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.5.0. This is due to missing nonce verification on the settings form in the func_page_main() function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-352", "description": "CWE-352 Cross-Site Request Forgery (CSRF)"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-15T08:28:15.602Z"}}}, "cveMetadata": {"cveId": "CVE-2026-4091", "state": "PUBLISHED", "dateUpdated": "2026-04-15T15:48:59.579Z", "dateReserved": "2026-03-12T21:16:13.890Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2026-04-15T08:28:15.602Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "The OPEN-BRAIN plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.5.0. This is due to missing nonce verification on the settings form in the func_page_main() function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."}], "id": "CVE-2026-4091", "lastModified": "2026-04-15T09:16:33.050", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.7, "source": "security@wordfence.com", "type": "Primary"}]}, "published": "2026-04-15T09:16:33.050", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/open-brain/tags/0.5.0/index.php#L237"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/open-brain/tags/0.5.0/index.php#L252"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/open-brain/tags/0.5.0/index.php#L253"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/open-brain/tags/0.5.0/index.php#L272"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/open-brain/trunk/index.php#L237"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/open-brain/trunk/index.php#L252"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/open-brain/trunk/index.php#L253"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/open-brain/trunk/index.php#L272"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/93df6480-9bb1-4f5d-bb39-ff1a01d739cf?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-352"}], "source": "security@wordfence.com", "type": "Primary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,0.5.0]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "OPEN-BRAIN", "source": "cna", "vendor": "faridsaniee"}, "product": "open-brain", "vendor": "faridsaniee"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": null}], "enrichment": {"confidence": 80.0, "confidence_source": "inferred", "scores": [{"score": 80.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "product": "wordpress", "vendor": "wordpress"}], "analysis": {"en": {"generated_at": "2026-04-15T10:51:08.723876+00:00", "value": {"mitigation_remediation": ["Update the OPEN\u2011BRAIN plugin to any version newer than 0.5.0, which removes the missing nonce check.", "If an upgrade is not possible, disable or uninstall the plugin until a patched version becomes available.", "If the plugin must remain active, implement server\u2011side CSRF protection by adding a nonce validation step to the settings form before processing any requests."], "summary": {"action": "Apply Patch", "impact": "Cross\u2011Site Request Forgery"}, "threat_synthesis": {"affected_systems": "WordPress installations running the OPEN\u2011BRAIN plugin by faridsaniee with a version of 0.5.0 or earlier are vulnerable. Versions newer than 0.5.0 have removed the missing nonce check and are not affected.", "description_and_impact": "The OPEN\u2011BRAIN plugin for WordPress contains a flaw where the settings form in the func_page_main() function does not perform nonce verification. This flaw allows an attacker who is not authenticated to forge a request that will be executed in the context of any logged\u2011in administrator who follows the attacker\u2019s link. The attacker can therefore inject malicious scripts or alter the site\u2019s configuration without requiring any credentials. The weakness is a classic CSRF vulnerability, identified by CWE\u2011352.", "risk_and_exploitability": "The CVSS score of 6.1 indicates the vulnerability has moderate severity. No EPSS score is available, so a precise exploitation probability cannot be quantified. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. Exploitation requires only that an attacker craft a malicious request and plant it in a link or email that an administrator will click; once the administrator follows that link, the request is processed with their elevated privileges. Because the attacker does not need to log in, the risk to site integrity and availability is considerable, though the overall likelihood of exploitation depends on the administrator\u2019s susceptibility to social engineering."}}}}, "created": "2026-04-15T13:49:14.862856+00:00", "updated": "2026-04-15T14:53:18.212959+00:00", "vendors": ["faridsaniee", "faridsaniee$PRODUCT$open-brain", "wordpress", "wordpress$PRODUCT$wordpress"]}