← WordPress Vulnerabilities
WordPress security by component

WP-Orphanage Extended

WP-Orphanage Extended is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Nov 23, 2024; the highest CVE/CNA score is 8.8.

Plugin slug: wp-orphanage-extended

CVE-2024-11415: WP-Orphanage Extended: Cross-site request forgery

WP-Orphanage Extended is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.

PublishedNov 23, 2024
Safe version guidanceSee mitigation notes
Safe version
Nov 23, 2024 CVE-2024-11415
WP-Orphanage Extended: Cross-site request forgery
WP-Orphanage Extended is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
See mitigation notes
CVE8.8
NVDPending