Medium · 5.4 CVE-2024-32096 EUVD-2024-29918GHSA-g6r8-fc95-4ggw

WordPress WP Synchro plugin <= 1.11.2 - Cross Site Request Forgery (CSRF) vulnerability

Published Apr 15, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: DAEV.tech Product: WP Migration Plugin DB & Files – WP Synchro

Description

Cross-Site Request Forgery (CSRF) vulnerability in DAEV.Tech WP Migration Plugin DB & Files – WP Synchro.This issue affects WP Migration Plugin DB & Files – WP Synchro: from n/a through 1.11.2.

Affected products

Vendor	Product	Affected	Fixed
DAEV.tech	WP Migration Plugin DB & Files – WP Synchro	≤ 1.11.2	—

References

https://patchstack.com/database/vulnerability/wpsynchro/wordpress-wp-synchro-plugin-1-11-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry