First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-32110

MediumCVSS 4.3/10Last modified Jul 23, 2026

Description

Cross-Site request forgery (CSRF) vulnerability in Magepeople inc. WpEvently allows Cross Site Request Forgery.

This issue affects WpEvently: from n/a through 4.1.2.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
Magepeople inc.	WpEvently	<= 4.1.2

References

https://patchstack.com/database/wordpress/plugin/mage-eventpress/vulnerability/wordpress-event-manager-and-tickets-selling-plugin-for-woocommerce-plugin-4-1-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve

Timeline

Published: Jun 11, 2026
Last modified: Jul 23, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-321115.0Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Automattic WordPress allows Relative Path Tr CVE-2024-321124.3Cross-Site Request Forgery (CSRF) vulnerability in Leadinfo leadinfo. The patch was released under the same version which was reported as vu CVE-2024-321139.8Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz.This issue affects Apache OFBiz CVE-2024-321148.8In Apache ActiveMQ 6.x, the default configuration doesn't secure the API web context (where the Jolokia JMX REST API and the Message REST AP CVE-2024-321155.5A relative path traversal vulnerability [CWE-23] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5 allows a privileged CVE-2024-321166.0Multiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, FortiAnalyz CVE-2024-321174.9An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiManager version 7.CVE-2024-321186.7Multiple improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet For CVE-2024-321194.8An improper authentication vulnerability [CWE-287] in Fortinet FortiClientEMS version 7.4.0 and before 7.2.4 allows an unauthenticated attac CVE-2024-321224.4A storing passwords in a recoverable format in Fortinet FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, For CVE-2024-321236.7Multiple improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiManager, FortiAnalyzer CVE-2024-321244.3An improper access control vulnerability [CWE-284] in FortiIsolator version 2.4.4, version 2.4.3, 2.3 all versions logging component may all

CVE-2024-32110: Medium severity, CVSS 4.3 | Vulnix