Approved changes feed: RSS · Atom

cpe:2.3:a:shibulijack:cj_change_howdy:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorShibulijack (62085e68-0094-56ed-974e-3fac0f91e2e5)
ProductCj Change Howdy (0da8280f-5bb1-562a-a104-664c2745636d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/common-repository/cj-change-howdy purl2cpe 2026-06-01 10:10:57.155652
pkg:github/shibulijack/cj-change-howdy purl2cpe 2026-06-01 10:10:57.155655

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-49223 vulnerable 2026-06-08 06:50:13.192758 WordPress CJ Change Howdy plugin <= 3.3.1 - CSRF to Stored XSS vulnerability
HIGH (7.1)
Cross-Site Request Forgery (CSRF) vulnerability in shibulijack CJ Change Howdy cj-change-howdy allows Cross Site Request Forgery.This issue affects CJ Change Howdy: from n/a through <= 3.3.1.
Published: 2024-10-17T17:53:54.413Z
Updated: 2026-04-29T09:51:52.967Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.