High · 7.1 CVE-2024-32550 EUVD-2024-30352GHSA-377x-pw2p-2hm3

WordPress BMI Adult & Kid Calculator plugin <= 1.2.1 - CSRF to XSS vulnerability

Published Apr 17, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: BMI Adult & Kid Calculator Product: BMI Adult & Kid Calculator

Description

Cross-Site Request Forgery (CSRF) vulnerability in BMI Adult & Kid Calculator allows Stored XSS.This issue affects BMI Adult & Kid Calculator: from n/a through 1.2.1.

Affected products

Vendor	Product	Affected	Fixed
BMI Adult & Kid Calculator	BMI Adult & Kid Calculator	≤ 1.2.1	—

References

https://patchstack.com/database/vulnerability/bmi-adultkid-calculator/wordpress-bmi-adult-kid-calculator-plugin-1-2-1-broken-access-control-to-xss-vulnerability?_s_id=cve vdb-entry