Medium · 4.3 CVE-2024-31371 EUVD-2024-29267GHSA-6pwm-9g9r-9xr7

WordPress WP Event Aggregator plugin <= 1.7.6 - Cross Site Request Forgery (CSRF) vulnerability

Published Apr 12, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Xylus Themes WP Event Aggregator.This issue affects WP Event Aggregator: from n/a through 1.7.6.

Vendor	Product	Affected	Fixed
Xylus Themes	WP Event Aggregator	≤ 1.7.6	—