Description
The logout option within MFA did not include the necessary token to avoid the risk of users inadvertently being logged out via CSRF.
Remediation
References
Related Vulnerabilities
Craft CMS Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-33160)
WordPress Plugin Custom Simple Rss Cross-Site Request Forgery (2.0.6)
WordPress Plugin WP-Syntax Remote PHP Code Execution (0.9.9)
Drupal Core 8.5.x Cross-Site Scripting (8.5.0 - 8.5.14)
WordPress Plugin WP Human Resource Management Security Bypass (2.2.5)