CVE-2024-37238: WordPress WPAdverts plugin <= 2.1.2 - Cross Site Request Forgery (CSRF) vulnerability
Published Jan 2, 2025
·Updated
Cross-Site Request Forgery (CSRF) vulnerability in Greg Winiarski WPAdverts wpadverts allows Cross Site Request Forgery.This issue affects WPAdverts: from n/a through <= 2.1.2.
Affected Software
1 affected component
Greg Winiarski WPAdverts<=2.1.2
Remediation
Information
Update the WordPress WPAdverts – Classifieds Plugin plugin to the latest available version (at least 2.1.3).
Event History
Jan 2, 2025
CVE Published
via MITRE·12:00 PM
Data Sourced
via MITRE·12:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-37238?
CVE-2024-37238 is classified as a Cross-Site Request Forgery (CSRF) vulnerability impacting the WPAdverts – Classifieds Plugin.
2
How do I fix CVE-2024-37238?
To fix CVE-2024-37238, update the WPAdverts – Classifieds Plugin to version 2.1.3 or higher.
3
Which versions of WPAdverts are affected by CVE-2024-37238?
CVE-2024-37238 affects WPAdverts – Classifieds Plugin versions up to and including 2.1.2.
4
Can CVE-2024-37238 lead to unauthorized actions?
Yes, CVE-2024-37238 allows attackers to perform unauthorized actions on behalf of users due to CSRF.
5
Is CVE-2024-37238 specific to certain web applications?
CVE-2024-37238 specifically affects the WPAdverts – Classifieds Plugin used in WordPress.