CVE-2024-31940: WordPress Extra Product Options Builder for WooCommerce plugin <= 1.2.104 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in RedNao Extra Product Options Builder for WooCommerce.This issue affects Extra Product Options Builder for WooCommerce: from n/a through 1.2.104.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-31940?
CVE-2024-31940 is classified as a Cross-Site Request Forgery (CSRF) vulnerability that can lead to unauthorized actions being performed by users.
How do I fix CVE-2024-31940?
To fix CVE-2024-31940, update the RedNao Extra Product Options Builder for WooCommerce plugin to a version higher than 1.2.104.
Which versions of Extra Product Options Builder for WooCommerce are affected by CVE-2024-31940?
CVE-2024-31940 affects all versions of Extra Product Options Builder for WooCommerce from n/a to 1.2.104.
What type of vulnerability is CVE-2024-31940?
CVE-2024-31940 is a Cross-Site Request Forgery (CSRF) vulnerability that can compromise web application security.
Is CVE-2024-31940 exploitable without user interaction?
Yes, CVE-2024-31940 can potentially be exploited without user interaction, making it a critical concern.