High · 7.1 CVE-2024-56015 EUVD-2024-52913GHSA-7v7x-8p54-6fgp

WordPress Tidy Up Plugin <= 1.3 - CSRF to Reflected Cross-Site Scripting vulnerability

Published Dec 16, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in John Godley Tidy Up allows Reflected XSS.This issue affects Tidy Up: from n/a through 1.3.

Vendor	Product	Affected	Fixed
John Godley	Tidy Up	≤ 1.3	—