Packagist/admidio/admidio CVE-2026-53760: medium 5.2, EPSS 0.17%

Admidio: CSRF on Plugin Install, Uninstall, and Update via Unprotected GET Requests

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-hm42-q32m-vj4f
• https://github.com/Admidio/admidio/security/advisories/GHSA-hm42-q32m-vj4f
• https://github.com/Admidio/admidio

CVE-2026-53760 · published 2026-07-09T13:44:40Z · modified 2026-07-09T14:11:38.652812Z · JSON