CVE-2026-22342 is an unauthenticated Cross-Site Request Forgery (CWE-352) vulnerability in PremiumPress Limited's WordPress Dating Theme affecting all versions up to 11.2.0 inclusive. The vulnerability allows remote attackers to induce users to perform state-changing actions without their consent, potentially leading to full compromise of confidentiality, integrity, and availability of the affected system. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. No patch or official remediation level has been published as of the data provided.

Successful exploitation of this vulnerability can lead to complete compromise of the affected WordPress Dating Theme, including unauthorized changes to data and disruption of service. The high CVSS score reflects the critical impact on confidentiality, integrity, and availability. Since the vulnerability is unauthenticated and requires only user interaction, it poses a significant risk to sites using affected versions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or limiting the use of the affected theme, applying web application firewall (WAF) rules to block CSRF attempts, and educating users about the risks of unsolicited requests. Monitor the vendor's communications for updates on patches or official mitigations.