← All advisories

Medium severity4.3NVD Advisory· Published Apr 15, 2024· Updated Jun 17, 2026

CVE-2024-31938

CVE-2024-31938

Description

Cross-Site Request Forgery (CSRF) vulnerability in Themeinwp NewsXpress.This issue affects NewsXpress: from n/a through 1.0.7.

Affected products

2

WordPress/Newsxpressinferred2 versions
<=1.0.7+ 1 more
- (no CPE)range: <=1.0.7
- (no CPE)range: <=1.0.7
Package: https://wordpress.org/themes/newsxpress

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/newsxpress/wordpress-newsxpress-theme-1-0-7-cross-site-request-forgery-csrf-vulnerabilitynvd

News mentions

0

No linked articles in our index yet.