CVE-2019-17386
HIGHanimate_it! < 2.3.6 - Cross-Site Request Forgery in edsanimate.php
Title source: llmDescription
The animate-it plugin before 2.3.6 for WordPress has CSRF in edsanimate.php.
References (4)
Core 4
Core References
Product, Release Notes x_refsource_misc
https://wordpress.org/plugins/animate-it/#developers
Third Party Advisory x_refsource_misc
https://www.pluginvulnerabilities.com/2019/07/29/vulnerability-details-cross-site-request-forgery-csrf-cross-site-scripting-xss-in-animate-it/
Patch, Third Party Advisory x_refsource_misc
https://plugins.trac.wordpress.org/changeset?old_path=%2Fanimate-it%2Ftags%2F2.3.6%2Fedsanimate.php&old=2129363&new_path=%2Fanimate-it%2Ftags%2F2.3.5%2Fedsanimate.php
Third Party Advisory x_refsource_misc
https://wpvulndb.com/vulnerabilities/9900
Scores
CVSS v3
8.8
EPSS
0.0086
EPSS Percentile
54.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-352
Status
published
Products (1)
eleopard/animate_it\!
< 2.3.6
Published
Oct 10, 2019
Tracked Since
Feb 18, 2026