Keybase.io Verification
Keybase.io Verification has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for Keybase.io Verification has a vendor fix available, so running the current release closes it.
All of these findings were reported by afnaan. Keybase.io Verification is installed on roughly 20 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.3.0.
CVE-2026-1072Keybase.io Verification <= 1.4.5 - Cross-Site Request Forgery to Settings Update
Read the full analysisVulnerability Records
Keybase.io Verification
Author
Jamesits
This plugin enables you to verify your site through keybase.io. Download from WordPress Plugin Directory: https://wordpress.org/plugins/wp-keybase-verification/ WordPress Plugin Directory SVN repository: https://plugins.svn.wordpress.org/wp-keybase-verification/ Github repository: https://github.com/Jamesits/wp-keybase-verification Don’t worry if the WordPress plugin page tells you “This plugin hasn’t been tested with the latest 3 major releases of WordPress”. This plugin does not need frequent upgrade. If it does not work for you, create an issue at GitHub or use the support forum for WordPress plugins. Disclaimer: This plugin and it’s developer is not affiliated with Keybase.io in any way. Features Add your keybase.txt file without needing FTP/SSH to upload and download files.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C