CVE-2024-31942

Calendarista Basic Edition (WordPress) is affected by a Cross-Site Request Forgery (CSRF) vulnerability for Calendarista Booking actions in versions up to 3.0.2. The issue is confirmed as fixed (Patched) in a newer release; upgrade to a patched version when available. If upgrading is not possible...

CVE-2024-32084

CVE-2024-32084 : Cross-Site Request Forgery in the WordPress plugin Before And After (Lead Capture Forms) affecting versions up to 3.9. Reported CVSS 3.1 (base score 4.3, MEDIUM). Vector: NETWORK; Attack complexity: LOW; Privileges required: NONE; User interaction: REQUIRED; Impact: only partial ...

CVE-2024-32096

CVE-2024-32096 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin WP Synchro (WP Synchro) , affecting versions from n/a through 1.11.2 . The connected documents confirm CSRF involvement but do not provide concrete exploit details, affected subcomponents, root caus...

CVE-2024-32097

CVE-2024-32097 is a Cross-Site Request Forgery (CSRF) vulnerability in the GEO my WordPress plugin, affecting GEO my WordPress versions up to 4.1. The connected Red Hat entry and Wordfence listing corroborate CSRF characteristics and affected range. The documents do not provide details on exploit...

CVE-2024-32099

CVE-2024-32099 is a Cross-Site Request Forgery (CSRF) vulnerability in the WP Mail Catcher WordPress plugin, affecting WP Mail Catcher versions up to 2.1.6. The vulnerability is documented with a CVSS v3.1 base score of 4.3 (Medium) and vectors including Network attack, Low attack complexity, No ...

CVE-2024-32101

CVE-2024-32101 is a CSRF vulnerability in the WordPress plugin “Email Marketing for WooCommerce by Omnisend.” Affected versions are from n/a through 1.14.3. The CVSS 3.1 score is 4.3 (Medium); attacker-controlled actions may be triggered by a victim with no privileges but requires user interactio...

CVE-2024-32102

CVE-2024-32102 is a Cross-Site Request Forgery vulnerability in Crony Cronjob Manager for WordPress, affecting Crony Cronjob Manager: from n/a through 0.5.0. Connected sources confirm the flaw is CSRF and that exploitation could allow unauthorized actions without formal user interaction details; ...

CVE-2024-32104

CVE-2024-32104 is a CSRF vulnerability affecting XLPlugins NextMove Lite (NextMove Lite: n/a through 2.18.1). The embedded CVSS details show the attack vector as Network, no confidentiality impact, low integrity impact, and no availability impact, with user interaction required and no privileges ...

CVE-2024-32141

No technical details are provided in the supplied documents about CVE-2024-32141 (Libsyn Publisher Hub). Public information on affected versions/impact/remediation is not present here; monitor for updates.

CVE-2024-32436

CVE-2024-32436 : CSRF vulnerability in Gift Cards / Gift Vouchers (WordPress plugin) affecting versions up to 4.4.0. Exploitation is not indicated in the entries; CVSS v3.1 base score 4.3 (Medium). Root cause and specific vectors are not detailed in the provided documents. Remediation referenced:...

CVE-2024-32438

Technical details about CVE-2024-32438 are not publicly provided in the connected documents; monitor for updates.

CVE-2024-32439

Technical details about CVE-2024-32439 are not publicly provided in the connected documents. Monitor vendor advisories and security feeds for updates.

CVE-2024-32442

Technical details about CVE-2024-32442 are not publicly provided in the supplied documents; no affected product versions, impact, or fixes are specified here. Monitor for updates.

CVE-2024-32443

CVE-2024-32443 is a CSRF vulnerability in the IP2Location Download IP2Location Country Blocker (WordPress plugin). Affected software: IP2Location Country Blocker Download, from n/a through 2.34.2. The vulnerability has high impact per NVD metrics (confidentiality, integrity, and availability all ...

CVE-2024-32445

CVE-2024-32445 is a CSRF vulnerability in Saleswonder’s WebinarIgnition plugin for WordPress, affecting WebinarIgnition up to version 3.05.8. The sources describe a CSRF flaw but do not provide exploitation details, confirmed patches, or exact affected configurations beyond that.

CVE-2024-32446

CVE-2024-32446 describes a CSRF vulnerability in Wallet System for WooCommerce. Affected: WP Swings Wallet System for WooCommerce, version range up to 2.5.9 (n/a–2.5.9). Root cause and exact impact are not fully detailed in the connected documents; CVSSv3.1 base score is reported as 5.4 (Medium)....

CVE-2024-32448

CVE-2024-32448 describes a CSRF vulnerability in the Ads.Txt Admin WordPress plugin. The initial entry identifies it as a CSRF issue affecting Ads.Txt Admin versions from n/a up to 1.3. Connected documents corroborate CSRF framing but do not provide exhaustive technical details such as affected f...

CVE-2024-32449

Technical details about CVE-2024-32449 are not publicly provided in the supplied documents. No affected versions, exploit info, or remediation details are stated here. Monitor for updates from vendors and security advisories.

CVE-2024-32450

CVE-2024-32450 is a Cross-Site Request Forgery in MagePeople’s WordPress plugin WpTravelly, affecting up to version 1.6.0; root cause and fixes are not detailed in the provided connected documents; monitor for updates.

CVE-2024-32082

CVE-2024-32082 concerns a CSRF issue affecting the kp4coder Sync Post With Other Site plugin, enabling Cross-Site Scripting (XSS) in the impacted workflow. The description states the vulnerability affects Sync Post With Other Site versions from n/a up to 1.5.1. The Connected documents do not prov...