Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-48031 EUVD-2024-42903GHSA-h54j-5f6g-862r

WordPress Featured Posts with Multiple Custom Groups (FPMCG) plugin <= 4.0 - Cross-Site Request Forgery (CSRF) vulnerability

Published Oct 17, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in sumitsurai Featured Posts with Multiple Custom Groups (FPMCG) featured-posts-with-multiple-custom-groups-fpmcg allows Cross Site Request Forgery.This issue affects Featured Posts with Multiple Custom Groups (FPMCG): from n/a through <= 4.0.

Affected products

VendorProductAffectedFixed
sumitsurai Featured Posts with Multiple Custom Groups (FPMCG) ≤ 4.0 —

References