Medium · 4.3 CVE-2024-53775 EUVD-2024-52107GHSA-9jmp-7pgh-x746

WordPress DancePress (TRWA) plugin <= 3.1.11 - Cross Site Request Forgery (CSRF) vulnerability

Published Dec 2, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: benmoreassynt Product: DancePress (TRWA)

Description

Cross-Site Request Forgery (CSRF) vulnerability in benmoreassynt DancePress (TRWA) dancepress-trwa allows Cross Site Request Forgery.This issue affects DancePress (TRWA): from n/a through <= 3.1.11.

Affected products

Vendor	Product	Affected	Fixed
benmoreassynt	DancePress (TRWA)	≤ 3.1.11	—

References

https://patchstack.com/database/Wordpress/Plugin/dancepress-trwa/vulnerability/wordpress-dancepress-trwa-plugin-3-1-11-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry