Description The link to update all installed language packs did not include the necessary token to prevent a CSRF risk. Remediation References CVE-2024-25982 Related Vulnerabilities WordPress Plugin Constant Contact for WordPress Unspecified Vulnerability (3.1.6) WordPress Plugin Hupso Share Buttons for Twitter, Facebook & Google+ Multiple Unspecified Vulnerabilities (4.0.3) WordPress Plugin YaySMTP-Simple WP SMTP Mail Cross-Site Scripting (2.2.1) WordPress Plugin WordPress Advanced Ticket System, Elite Support Helpdesk Cross-Site Scripting (1.0.63) WordPress Plugin AmazonFeed Cross-Site Scripting (2.1) Severity High Classification CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities CWE-352 CVE-2024-25982