VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Jan 27, 2025· Updated Jun 17, 2026

CVE-2024-12436

CVE-2024-12436

Description

The WP Customer Area WordPress plugin through 8.2.4 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Marvinlabs/Wp Customer Area2 versions
    cpe:2.3:a:marvinlabs:wp_customer_area:*:*:*:*:*:wordpress:*:*+ 1 more
    • cpe:2.3:a:marvinlabs:wp_customer_area:*:*:*:*:*:wordpress:*:*range: <=8.2.4
    • (no CPE)range: 0
  • WordPress/Wp Customer Areallm-fuzzy2 versions
    <=8.2.4+ 1 more
    • (no CPE)range: <=8.2.4
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.