Lucene search

CVE-2024-1907

🗓️ 27 Feb 2024 11:09:15Reported by WordfenceType

The Categorify plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.7.4

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2024-1907	27 Feb 202411:05	–	cvelist
Prion	Cross site request forgery (csrf)	27 Feb 202411:15	–	prion
WPVulnDB	Categorify < 1.0.7.5 - Cross-Site Request Forgery via categorifyAjaxDeleteCategory	26 Feb 202400:00	–	wpvulndb
Vulnrichment	CVE-2024-1907	27 Feb 202411:05	–	vulnrichment
NVD	CVE-2024-1907	27 Feb 202411:15	–	nvd
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (February 26, 2024 to March 3, 2024)	7 Mar 202416:12	–	wordfence

Nvd

Vulners

Node

frenify categorifyRange<1.0.7.5wordpress

[
  {
    "vendor": "frenify",
    "product": "Categorify – WordPress Media Library Category & File Manager",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "1.0.7.4",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/08c79118-9dad-44fd-b683-7950276d3808
plugins	www.plugins.trac.wordpress.org/changeset/3034410/categorify

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Feb 2024 11:15Current

5.2Medium risk

Vulners AI Score5.2

CVSS34.3

EPSS0.00043

SSVC

CWE-352