CVE-2026-61956

A Cross-Site Request Forgery (CSRF) vulnerability exists in the ووسلام – همگام سازی ووکامرس و باسلام sync-basalam plugin, affecting versions up to and including 1.9.1. This flaw could allow an attacker to perform unauthorized actions on behalf of authenticated users, potentially compromising sensitive data or altering user settings. Organizations using this plugin should prioritize remediation to mitigate the risk of exploitation.