Approved changes feed: RSS · Atom

cpe:2.3:a:uxper:civi_framework:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUxper (6c56a358-8d6f-5c7d-9d6e-386b1220c2cf)
ProductCivi Framework (dceff47c-7f57-5a4e-aeb7-5460b10eb210)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-49511 vulnerable 2026-06-08 07:29:13.234972 WordPress Civi Framework plugin <= 2.1.6 - Cross Site Request Forgery (CSRF) to User Deactivation vulnerability
HIGH (7.1)
Cross-Site Request Forgery (CSRF) vulnerability in uxper Civi Framework civi-framework allows Cross Site Request Forgery.This issue affects Civi Framework: from n/a through <= 2.1.6.
Published: 2025-06-10T12:35:33.715Z
Updated: 2026-04-28T16:13:05.603Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.