2026-04-22 · 2 min · BitNinja Team

CVE-2026-4133: CSRF Vulnerability in TextP2P Widget

The recently identified CVE-2026-4133 vulnerability affects the TextP2P Texting Widget plugin for WordPress. All versions up to and including 1.7 are at risk due to cross-site request forgery (CSRF). This issue arises because the imTextP2POptionPage() function is missing prope...