CVE Database /
CVE-2024-32437
CVE · Medium
CVE-2024-32437 — eCommerce Product Catalog [ecommerce-product-catalog] < 3.3.29
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-32437
|
eCommerce Product Catalog [ecommerce-product-catalog] < 3.3.29 |
Cross-Site Request Forgery (CSRF) |
Medium
4.3
|
< 3.3.29
|
3.3.29 |
2024-04-12 |
—
|
CVE-2024-32437
The eCommerce Product Catalog plugin for WordPress contains a cross-site request forgery vulnerability in versions before 3.3.29 that could enable attackers to trick authenticated users with elevated privileges into performing unintended actions on their behalf. Researcher Dhabaleshwar Das identified and disclosed this flaw, which has been remedied in version 3.3.29 and later. WordPress site administrators should upgrade to the patched version to mitigate this security risk.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings