Vulnerability Database

309,364

Total vulnerabilities in the database

CVE-2024-11719

The tarteaucitron-wp WordPress plugin before 0.3.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.

  • Published: May 15, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2024-11719
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.1
  • AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWEs:

Software From Fixed in
Composer icon couleurcitron / tarteaucitron-wp - 0.3.0