CVE Intelligence

Wpcoachify vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Wpcoachify products: 2 record(s), with severity, exploitation and fixes.

Coachify 2

Exploited only (KEV) →

CVE-2026-25337 Medium · 5.4 CWE-352 Feb 19, 2026
WordPress Coachify theme <= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in wpcoachify Coachify coachify allows Cross Site Request Forgery.This issue affects Coachify: from n/a through <= 1.1.5.
CVE-2026-25336 Medium · 5.3 CWE-862 Feb 19, 2026
WordPress Coachify theme <= 1.1.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in wpcoachify Coachify coachify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Coachify: from n/a through <= 1.1.5.