4.3
Medium
CVE-2024-35684 Cross-Site Request Forgery (CSRF) vulnerability in 10up ElasticPress elasticpress.This issue affects ElasticPress:…
Description
Cross-Site Request Forgery (CSRF) vulnerability in 10up ElasticPress elasticpress.This issue affects ElasticPress: from n/a through <= 5.1.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ElasticPress 5.1 | earliest → 5.1.1 | No fix stated |
Other CVEs of ElasticPress
The 4 CVEs of ElasticPress →
CVE-2026-62088
Insertion of Sensitive Information Into Sent Data vulnerability in 10up ElasticPress allows Retrieve Embedded…
5.3
Medium
CVE-2023-48753
Authentication Bypass by Spoofing vulnerability in 10up Restricted Site Access allows Accessing Functionality Not…
5.3
Medium
CVE-2021-4405
The ElasticPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including,…
4.3
Medium