CVE-2026-22360
Awaiting Analysis Awaiting Analysis - Queue
BaseFortify

Publication date: 2026-01-22

Last updated on: 2026-01-27

Assigner: Patchstack

Description
Cross-Site Request Forgery (CSRF) vulnerability in AA-Team SearchAzon searchazon allows Cross Site Request Forgery.This issue affects SearchAzon: from n/a through <= 1.4.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-01-22
Last Modified
2026-01-27
Generated
2026-06-16
AI Q&A
2026-01-22
EPSS Evaluated
2026-06-14
NVD
CVE-2026-22360
Affected Vendors & Products
Currently, no data is known.
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-352 The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

CVE-2026-22360 is a Cross Site Request Forgery (CSRF) vulnerability in the WordPress SearchAzon Plugin versions up to and including 1.4. It allows an attacker to trick higher privileged users into executing unwanted actions while authenticated by having them click a malicious link, visit a crafted page, or submit a form. Exploitation requires user interaction but no authentication is needed to initiate the attack. [1]

Impact Analysis

This vulnerability can lead to unauthorized actions being performed on behalf of authenticated users with higher privileges, potentially compromising the integrity of the affected system. However, it is considered low severity with a CVSS score of 4.3 and is unlikely to be exploited with significant impact. [1]

Mitigation Strategies

Since no official fix is currently available for this vulnerability, immediate mitigation steps include avoiding clicking on suspicious links or visiting untrusted pages while authenticated in the SearchAzon plugin environment. Additionally, limit user privileges to reduce risk, and monitor for unusual user actions. Applying general CSRF protections such as using anti-CSRF tokens in forms and ensuring proper access controls can help mitigate risk until a patch is released. [1]

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-22360. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart