Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2026-24384

WordPress Merge + Minify + Refresh plugin <= 2.14 - Cross Site Request Forgery (CSRF) vulnerability

Description

Cross-Site Request Forgery (CSRF) vulnerability in launchinteractive Merge + Minify + Refresh merge-minify-refresh allows Cross Site Request Forgery.This issue affects Merge + Minify + Refresh: from n/a through <= 2.14.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

launchinteractive Merge + Minify + Refresh

Default version status: unaffected

  • 0 to ≤ 2.14affected

References