CVE-2012-5387: Cross-site request forgery (CSRF) vulnerability in wlcms-plugin.php in the White Label CMS plugin before 1....

Security readout for executives and security teams

This flaw affects the White Label CMS WordPress plugin before 1.5.1. It could let an attacker trick a logged-in administrator into changing the plugin’s developer name setting, including content that may create cross-site scripting impact. The issue is old, but any legacy WordPress estate still running the plugin should verify version and configuration. Exposure is limited to WordPress sites running the White Label CMS plugin before version 1.5.1, especially where administrators access wp-admin while browsing untrusted content. Treat this as a legacy WordPress hygiene issue with moderate urgency. It is not presented as actively exploited, but outdated admin plugins can create avoidable compromise paths. Mitigation focus: Inventory WordPress sites for the White Label CMS plugin.; Upgrade White Label CMS to version 1.5.1 or later where present.; If upgrade status is unclear, check the WordPress plugin changelog and vendor guidance..

Prepared

Jun 24, 2026, 19:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.