CVE-2024-24706

MEDIUM

Forum One WP-CFM <= 1.7.8 - Cross-Site Request Forgery

Title source: llm

Cross-Site Request Forgery (CSRF) vulnerability in Forum One WP-CFM wp-cfm.This issue affects WP-CFM: from n/a through 1.7.8.

Core 2

Core References

Third Party Advisory vdb-entry

Vendor Advisory vendor-advisory

CVSS v3 5.4

EPSS 0.0022

EPSS Percentile 12.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

CWE

CWE-352

Status published

Products (2)

Forum One/WP-CFM < 1.7.8

forumone/wp-cfm < 1.7.9

Published Feb 07, 2024

Tracked Since Feb 18, 2026