GCVE - cpe:2.3:a:frenify:categorify:*:*:*:*:*:wordpress:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:frenify:categorify:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

Vendor	Frenify (`a7f824cd-53a2-5549-8762-a5cbb5df58c1`)
Product	Categorify (`9b881af8-ac78-5793-892f-bbcd4f23ba95`)
Edition	*
Language	*
Software edition	*
Target software	wordpress
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-1912`	vulnerable	2026-06-08 06:27:14.900566	Categorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxUpdateFolderPosition MEDIUM (4.3) The Categorify plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.7.4. This is due to missing or incorrect nonce validation on the categorifyAjaxUpdateFolderPosition function. This makes it possible for unauthenticated attackers to update the folder position of categories as well as update the metadata of other taxonomies via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Published: 2024-02-27T11:05:07.777Z Updated: 2026-04-08T16:59:13.588Z Open on db.gcve.eu Reference links https://www.wordfence.com/threat-intel/vulnerabilities/id/6ca28c91-f75e-4691-91cf-459cc9da5ad8?source=cve https://plugins.trac.wordpress.org/changeset/3034410/categorify	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-1910`	vulnerable	2026-06-08 06:27:14.900098	Categorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxClearCategory MEDIUM (4.3) The Categorify plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.7.4. This is due to missing or incorrect nonce validation on the categorifyAjaxClearCategory function. This makes it possible for unauthenticated attackers to clear categories via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Published: 2024-02-27T11:05:09.553Z Updated: 2026-04-08T17:16:18.181Z Open on db.gcve.eu Reference links https://www.wordfence.com/threat-intel/vulnerabilities/id/b1c2712d-0865-4759-98da-1e11a26f2466?source=cve https://plugins.trac.wordpress.org/changeset/3034410/categorify	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-1909`	vulnerable	2026-06-08 06:27:14.899600	Categorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxRenameCategory MEDIUM (4.3) The Categorify plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.7.4. This is due to missing or incorrect nonce validation on the categorifyAjaxRenameCategory function. This makes it possible for unauthenticated attackers to rename categories via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Published: 2024-02-27T11:05:07.234Z Updated: 2026-04-08T16:54:37.337Z Open on db.gcve.eu Reference links https://www.wordfence.com/threat-intel/vulnerabilities/id/58b29729-e9c3-4d57-affd-6142dfa8cc6f?source=cve https://plugins.trac.wordpress.org/changeset/3034410/categorify	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-1907`	vulnerable	2026-06-08 06:27:14.895978	Categorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxDeleteCategory MEDIUM (4.3) The Categorify plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.7.4. This is due to missing or incorrect nonce validation on the categorifyAjaxDeleteCategory function. This makes it possible for unauthenticated attackers to delete categories via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Published: 2024-02-27T11:05:06.027Z Updated: 2026-04-08T16:34:19.939Z Open on db.gcve.eu Reference links https://www.wordfence.com/threat-intel/vulnerabilities/id/08c79118-9dad-44fd-b683-7950276d3808?source=cve https://plugins.trac.wordpress.org/changeset/3034410/categorify	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-1906`	vulnerable	2026-06-08 06:27:14.895588	Categorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxAddCategory MEDIUM (4.3) The Categorify plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.7.4. This is due to missing or incorrect nonce validation on the categorifyAjaxAddCategory function. This makes it possible for unauthenticated attackers to add categories via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Published: 2024-02-27T11:05:08.424Z Updated: 2026-04-08T17:01:51.126Z Open on db.gcve.eu Reference links https://www.wordfence.com/threat-intel/vulnerabilities/id/78422a30-bdc6-4e7c-a018-c3dc4b4be6a0?source=cve https://plugins.trac.wordpress.org/changeset/3034410/categorify	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-1653`	vulnerable	2026-06-08 06:27:13.999011	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-1652`	vulnerable	2026-06-08 06:27:13.998416	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-1650`	vulnerable	2026-06-08 06:27:13.993556	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-1649`	vulnerable	2026-06-08 06:27:13.992898	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-0385`	vulnerable	2026-06-08 06:22:00.498882	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.