CVE-2024-34809

Cross-Site Request Forgery CSRF vulnerability in Extend Themes EmpowerWP.This issue affects EmpowerWP: from n/a through 1.0.21...

CVE-2024-34809

CVE-2024-34809 is a CSRF vulnerability in EmpowerWP (Extend Themes EmpowerWP) affecting EmpowerWP versions up to 1.0.21. The related Red Hat and Wordfence entries confirm Cross-Site Request Forgery enabling notice dismissal. Patch status in the vulnerability record indicates EmpowerWP

WordPress EmpowerWP Theme <= 1.0.21 is vulnerable to Cross Site Request Forgery (CSRF)

Software EmpowerWP Type Theme Vulnerable versions = 1.0.21 Fixed in 1.0.22 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-34809 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 85b13182da01 Credits Dhabaleshwar Das Require...