@offseq.bsky.social on Bluesky

Post

OffSequence

offseq.bsky.social

did:plc:t5t6qep2vfipbi7f54demwev

CRITICAL CSRF vulnerability (CVE-2026-28164) in HashThemes Easy Elementor Addons ≤2.3.7 lets attackers execute actions as users. No patch yet — monitor vendor for updates. https://radar.offseq.com/threat/cve-2026-28164-cwe-352-cross-site-request-forgery-csrf-in-hashthemes-easy-elementor-addons-7b... https://radar.offseq.com/threat/cve-2026-28164-cwe-352-cross-site-request-forgery-csrf-in-hashthemes-easy-elementor-addons-7bfb9b1be22a1e31

2026-08-20T13:30:28.663Z

Enable JavaScript to use Bluesky.

Learn more about Bluesky at bsky.social and atproto.com.