CVE-2024-11975 Reactflow Visitor Recording and Heatmaps <= 1.0.10 - Cross-Site Request Forgery to Reflected Cross-Site Scripting

🗓️ 21 Dec 2024 07:03:03Reported by WordfenceType

Reactflow plugin for WordPress vulnerable to Cross-Site Request Forgery and Cross-Site Scripting.

Reporter	Title	Published	Views	Family All 4
CVE	CVE-2024-11975	21 Dec 202407:15	–	cve
Cvelist	CVE-2024-11975 Reactflow Visitor Recording and Heatmaps <= 1.0.10 - Cross-Site Request Forgery to Reflected Cross-Site Scripting	21 Dec 202407:03	–	cvelist
NVD	CVE-2024-11975	21 Dec 202407:15	–	nvd
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (December 16, 2024 to January 5, 2025)	9 Jan 202514:35	–	wordfence

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/reactflow-session-replay-heatmap/tags/1.0.10/reactflow.php
wordpress	www.wordpress.org/plugins/reactflow-session-replay-heatmap/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/eb360c56-e144-4dc5-8bfb-715a014cb8e6

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 Dec 2024 07:03Current

6.5Medium risk

Vulners AI Score6.5

CVSS36.1

SSVC

CWE-352