Medium · 4.3 CVE-2024-24701 EUVD-2024-22100GHSA-crwp-2h3q-vwm3

WordPress Setka Editor Plugin <= 2.1.20 is vulnerable to Cross Site Request Forgery (CSRF)

Published Feb 28, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Native Grid Product: A no-code page builder for beautiful performance-based content

Description

Cross-Site Request Forgery (CSRF) vulnerability in Native Grid LLC A no-code page builder for beautiful performance-based content.This issue affects A no-code page builder for beautiful performance-based content: from n/a through 2.1.20.

Affected products

Vendor	Product	Affected	Fixed
Native Grid	A no-code page builder for beautiful performance-based content	≤ 2.1.20	—

References

https://patchstack.com/database/vulnerability/setka-editor/wordpress-setka-editor-plugin-2-1-20-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry