TI-2022-26407 CVE-2022-50955 · GHSA-wmcf-f324-fm28WordPress Plugin Curtain 1.0.2 Cross-site Request ForgeryPriority MEDIUM 57WordPress Plugin Curtain 1.0.2 contains a cross-site request forgery vulnerability that allows attackers to activate or deactivate site maintenance mode by crafting malicious requests.CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0013 · Published 2026-05-10 · No fix listed CWE-352