CVE-2011-4452: Cross-site request forgery (CSRF) vulnerability in the AdminUsers component in WikkaWiki 1.3.1 and 1.3.2 al...

Security readout for executives and security teams

CVE-2011-4452 is a CSRF issue in WikkaWiki’s AdminUsers component. If an administrator is already logged in, a remote attacker could trick the administrator’s browser into sending a delete request that removes arbitrary user accounts. Public source data does not provide CVSS, KEV listing, or confirmed active exploitation. Exposure is most likely limited to organizations still running WikkaWiki 1.3.1 or 1.3.2 with administrator access to the AdminUsers component. Internet exposure increases phishing-driven CSRF risk, but exploitation still depends on a logged-in administrator being induced to trigger a crafted request. Treat this as a targeted legacy-platform risk. It can affect account integrity if an administrator is tricked while logged in, but public evidence in this bundle does not show active exploitation or severity scoring. Prioritize if WikkaWiki remains in production. Mitigation focus: Identify any WikkaWiki 1.3.1 or 1.3.2 deployments.; Review Wikka project tickets and changesets for vendor-fixed versions or patches.; Apply vendor-supported updates or patches where available..

Prepared

Jun 28, 2026, 00:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.