Vulnerabilities

TI-2026-20455 CVE-2026-25337 · GHSA-vjqp-jjh4-4pp5

WordPress Coachify theme <= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerability

LOW 23

Cross-Site Request Forgery (CSRF) vulnerability in wpcoachify Coachify coachify allows Cross Site Request Forgery.This issue affects Coachify: from n/a through <= 1.1.5.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00124 Published 2026-02-19 No fix listed CWE-352

TI-2026-20454 CVE-2026-25336 · GHSA-528q-f4x8-fm57

WordPress Coachify theme <= 1.1.5 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in wpcoachify Coachify coachify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Coachify: from n/a through <= 1.1.5.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00322 Published 2026-02-19 No fix listed CWE-862

TI-2024-24921 CVE-2024-37417 · GHSA-fpgj-7jhh-pchm

WordPress Coachify theme <= 1.0.7 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in wpcoachify Coachify coachify allows Cross Site Request Forgery.This issue affects Coachify: from n/a through <= 1.0.7.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00178 Published 2025-01-02 No fix listed CWE-352

Vulnerabilities

Filters

WordPress Coachify theme <= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerability

WordPress Coachify theme <= 1.1.5 - Broken Access Control vulnerability

WordPress Coachify theme <= 1.0.7 - Cross Site Request Forgery (CSRF) vulnerability