CVE-2026-57786

A Cross-Site Request Forgery (CSRF) vulnerability in the WorkScout-Core plugin allows attackers to bypass authentication, potentially granting unauthorized access to sensitive functions. This high-severity flaw affects versions up to and including 1.7.08, making it critical for users of the WorkScout-Core plugin to prioritize immediate updates or mitigations to safeguard their systems. Organizations utilizing this plugin should assess their exposure and implement necessary security measures promptly.