Lucene search

CVE-2024-34809

🗓️ 17 May 2024 10:14:15Reported by PatchstackType

Cross-Site Request Forgery vulnerability in EmpowerWP

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 6
WPVulnDB	EmpowerWP < 1.0.22 - Cross-Site Request Forgery to Notice Dismissal	19 May 202400:00	–	wpvulndb
Vulnrichment	CVE-2024-34809 WordPress EmpowerWP theme <= 1.0.21 - Cross Site Request Forgery (CSRF) vulnerability	17 May 202409:43	–	vulnrichment
Patchstack	WordPress EmpowerWP Theme <= 1.0.21 is vulnerable to Cross Site Request Forgery (CSRF)	13 May 202400:00	–	patchstack
NVD	CVE-2024-34809	17 May 202410:15	–	nvd
Cvelist	CVE-2024-34809 WordPress EmpowerWP theme <= 1.0.21 - Cross Site Request Forgery (CSRF) vulnerability	17 May 202409:43	–	cvelist
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (May 13, 2024 to May 19, 2024)	23 May 202415:00	–	wordfence

Vulners

Vulnrichment

Node

extend_themes empowerwpRange≤1.0.21wordpress

[
  {
    "collectionURL": "https://wordpress.org/themes",
    "defaultStatus": "unaffected",
    "packageName": "empowerwp",
    "product": "EmpowerWP",
    "vendor": "Extend Themes",
    "versions": [
      {
        "changes": [
          {
            "at": "1.0.22",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "1.0.21",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
patchstack	www.patchstack.com/database/vulnerability/empowerwp/wordpress-empowerwp-theme-1-0-21-cross-site-request-forgery-csrf-vulnerability

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

17 May 2024 10:15Current

6.8Medium risk

Vulners AI Score6.8

CVSS34.3

EPSS0.0004

SSVC

CWE-352