← All advisories

Medium severity5.4NVD Advisory· Published Apr 11, 2024· Updated Jun 17, 2026

CVE-2024-31936

CVE-2024-31936

Description

Cross-Site Request Forgery (CSRF) vulnerability in AyeCode Ltd UsersWP.This issue affects UsersWP: from n/a before 1.2.6.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

WordPress/Userswpinferred2 versions
<1.2.6+ 1 more
- (no CPE)range: <1.2.6
- (no CPE)range: <1.2.6
Package: https://wordpress.org/plugins/userswp
Ayecode/Userswpllm-fuzzy
Range: <1.2.6

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/userswp/wordpress-userswp-front-end-login-form-user-registration-user-profile-members-directory-plugin-for-wordpress-plugin-1-2-6-cross-site-request-forgery-csrf-vulnerabilitynvd

News mentions

0

No linked articles in our index yet.