CVE-2026-62139 Unauthenticated Cross Site Request Forgery (CSRF) in Site Kit by Google <= 1.186.0 versions

Description

Unauthenticated Cross Site Request Forgery (CSRF) in Site Kit by Google <= 1.186.0 versions.

Affected products and versions

Product	Affected versions	Fixed in
Site Kit By Google 1.186	earliest → 1.186.0	No fix stated

Other CVEs of Site Kit By Google

The 2 CVEs of Site Kit By Google →

CVE-2020-8934 The Site Kit by Google plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and… 4.3 Medium