CVE-2024-32112 - WordPress Leadinfo plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability

Back Back to CVE browser

MEDIUM

WordPress Leadinfo plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability

Published Apr 11, 2024

4.3

MEDIUM

CVSS 3.1

EPSS 0.19%

Description

Cross-Site Request Forgery (CSRF) vulnerability in Leadinfo leadinfo. The patch was released under the same version which was reported as vulnerable. We consider the current version as vulnerable.This issue affects Leadinfo: from n/a through 1.0.

Affected products

Vendor Leadinfo Product Leadinfo Default
unaffected
Affected
- ≤ 1.0

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Leadinfo	Leadinfo	unaffected	Affected ≤ 1.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-29934		Advisory
https://patchstack.com/database/vulnerability/leadinfo/wordpress-leadinfo-plugin-1-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve		vdb-entry

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Patchstack

Published Apr 11, 2024

Updated Apr 28, 2026

Reserved Apr 10, 2024

Link CVE-2024-32112

CISA Vulnrichment

Updated Aug 8, 2024

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2024-32112

Red Hat

No data

ENISA EUVD

Assigner Patchstack

Published Apr 11, 2024

Updated Apr 28, 2026

Link EUVD-2024-29934

GitHub

No data