CVE-2024-31301 - WordPress Multiple Page Generator Plugin – MPG plugin <= 3.4.0 - Cross Site Request Forgery (CSRF) vulnerability

Back Back to CVE browser

HIGH

WordPress Multiple Page Generator Plugin – MPG plugin <= 3.4.0 - Cross Site Request Forgery (CSRF) vulnerability

Published Apr 12, 2024

8.8

HIGH

CVSS 3.1

EPSS 0.22%

Description

Cross-Site Request Forgery (CSRF) vulnerability in Themeisle Multiple Page Generator Plugin – MPG.This issue affects Multiple Page Generator Plugin – MPG: from n/a through 3.4.0.

Affected products

Vendor Themeisle Product Multiple Page Generator Plugin – MPG Default
unaffected
- Version
  -
  Status
  affected
  Constraints
  <=3.4.0

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Themeisle

Multiple Page Generator Plugin – MPG

unaffected

Version	Status	Constraints
-	affected	<=3.4.0

Remediation

Vendor solution

Update to 3.4.1 or a higher version.

Weaknesses (1)

CWE-352

CSRF

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-29197		Advisory
https://patchstack.com/database/vulnerability/multiple-pages-generator-by-porthas/wordpress-multiple-page-generator-plugin-mpg-plugin-3-4-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve		vdb-entryThird Party Advisory