Medium · 4.3 CVE-2024-31940 EUVD-2024-29798GHSA-vc8m-vjwh-382j

WordPress Extra Product Options Builder for WooCommerce plugin <= 1.2.104 - Cross Site Request Forgery (CSRF) vulnerability

Published Apr 15, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: RedNao Product: Extra Product Options Builder for WooCommerce Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability in RedNao Extra Product Options Builder for WooCommerce.This issue affects Extra Product Options Builder for WooCommerce: from n/a through 1.2.104.

Affected products

Vendor	Product	Affected	Fixed
RedNao	Extra Product Options Builder for WooCommerce	≤ 1.2.104	—

References

https://patchstack.com/database/vulnerability/additional-product-fields-for-woocommerce/wordpress-extra-product-options-builder-for-woocommerce-plugin-1-2-104-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry