Threat Intelligence / CVE / CVE-2026-59520

CVE-2026-59520

CVSS 4.3 (MEDIUM) · EPSS 0.1% · Priority 2.2/10 · Published 2026-07-05

As of 2026-07-06, CVE-2026-59520 is a CVSS 4.3 (MEDIUM-severity) vulnerability. EPSS exploitation probability 0.1%. Threadlinqs Intelligence tracks 0 threats exploiting it.

Last updated: 2026-07-06

Cross-Site Request Forgery (CSRF) vulnerability in properfraction CrawlWP SEO allows Cross Site Request Forgery. This issue affects CrawlWP SEO: from n/a through 3.0.16.

CVSS v3 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Weaknesses (CWE)

CWE-352

References

https://patchstack.com/database/wordpress/plugin/mihdan-index-now/vulnerability/wordpress-index-now-plugin-3-0-16-cross-site-request-forgery-csrf-vulnerability?_s_id=cve

Full detection coverage & IOCs for threats exploiting CVE-2026-59520 are available via the Threadlinqs MCP server (Purple tier). View plans →

← all vulnerabilities · Markdown version · Threadlinqs Intelligence

Enriched from CVE.org, NVD (this product uses the NVD API but is not endorsed or certified by the NVD), FIRST EPSS, CISA KEV, and GitHub Security Advisories.