Medium · 4.3 CVE-2024-33679 EUVD-2024-31391GHSA-h282-h49g-gvfm

WordPress FameTheme Demo Importer plugin <= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerability

Published Apr 26, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: famethemes Product: FameTheme Demo Importer

Description

Cross-Site Request Forgery (CSRF) vulnerability in FameThemes FameTheme Demo Importer.This issue affects FameTheme Demo Importer: from n/a through 1.1.5.

Affected products

Vendor	Product	Affected	Fixed
FameThemes	FameTheme Demo Importer	≤ 1.1.5	—

References

https://patchstack.com/database/vulnerability/famethemes-demo-importer/wordpress-fametheme-demo-importer-plugin-1-1-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry