Medium · 5.4 CVE-2022-32587 EUVD-2022-35653GHSA-24j5-267c-mjxv

WordPress WP Page Widget plugin <= 3.9 - Cross-Site Request Forgery (CSRF) vulnerability

Published Nov 8, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in CodeAndMore WP Page Widget plugin <= 3.9 on WordPress leading to plugin settings change.

Vendor	Product	Affected	Fixed
CodeAndMore	WP Page Widget (WordPress plugin)	<= 3.9 – ≤ 3.9	—