CVE-2024-31386

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2024
Source publication: Apr 10, 2024
Source updated: Apr 28, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Multiple WordPress themes affected by Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in Hidekazu Ishikawa X-T9, Hidekazu Ishikawa Lightning, themeinwp Default Mag, Out the Box Namaha, Out the Box CityLogic, Marsian i-max, Jetmonsters Emmet Lite, Macho Themes Decode, Wayneconnor Sliding Door, Out the Box Shopstar!, Modernthemesnet Gridsby, TT Themes HappenStance, Marsian i-excel, Out the Box Panoramic, Modernthemesnet Sensible WP.This issue affects X-T9: from n/a through 1.19.0; Lightning: from n/a through 15.18.0; Default Mag: from n/a through 1.3.5; Namaha: from n/a through 1.0.40; CityLogic: from n/a through 1.1.29; i-max: from n/a through 1.6.2; Emmet Lite: from n/a through 1.7.5; Decode: from n/a through 3.15.3; Sliding Door: from n/a through 3.3; Shopstar!: from n/a through 1.1.33; Gridsby: from n/a through 1.3.0; HappenStance: from n/a through 3.0.1; i-excel: from n/a through 1.7.9; Panoramic: from n/a through 1.1.56; Sensible WP: from n/a through 1.3.1.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

X-T9

Vendor: Hidekazu Ishikawa
Product: X-T9
Platforms: Unknown
Default status: unaffected
Package: x-t9
Package collection: https://wordpress.org/themes/

X-T9 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
n/a	`affected`	custom	Unavailable	1.19.0	`1.19.1` → `unaffected`

Lightning

Vendor: Hidekazu Ishikawa
Product: Lightning
Platforms: Unknown
Default status: unaffected
Package: lightning
Package collection: https://wordpress.org/themes/

Lightning · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
n/a	`affected`	custom	Unavailable	15.18.0	`15.19.0` → `unaffected`

Default Mag

Vendor: themeinwp
Product: Default Mag
Platforms: Unknown
Default status: unaffected
Package: default-mag
Package collection: https://wordpress.org/themes/

Default Mag · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
n/a	`affected`	custom	Unavailable	1.3.5	`1.3.6` → `unaffected`

Namaha

Vendor: Out the Box
Product: Namaha
Platforms: Unknown
Default status: unaffected
Package: namaha
Package collection: https://wordpress.org/themes/

Namaha · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
n/a	`affected`	custom	Unavailable	1.0.40	`1.0.41` → `unaffected`

CityLogic

Vendor: Out the Box
Product: CityLogic
Platforms: Unknown
Default status: unaffected
Package: citylogic
Package collection: https://wordpress.org/themes/

CityLogic · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
n/a	`affected`	custom	Unavailable	1.1.29	`1.1.30` → `unaffected`

i-max

Vendor: Marsian
Product: i-max
Platforms: Unknown
Default status: unaffected
Package: i-max
Package collection: https://wordpress.org/themes/

i-max · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
n/a	`affected`	custom	Unavailable	1.6.2	None listed

Emmet Lite

Vendor: Jetmonsters
Product: Emmet Lite
Platforms: Unknown
Default status: unaffected
Package: emmet-lite
Package collection: https://wordpress.org/themes/

Emmet Lite · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
n/a	`affected`	custom	Unavailable	1.7.5	`1.7.8` → `unaffected`

Decode

Vendor: Macho Themes
Product: Decode
Platforms: Unknown
Default status: unaffected
Package: decode
Package collection: https://wordpress.org/themes/

Decode · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
n/a	`affected`	custom	Unavailable	3.15.3	None listed

Sliding Door

Vendor: Wayneconnor
Product: Sliding Door
Platforms: Unknown
Default status: unaffected
Package: sliding-door
Package collection: https://wordpress.org/themes/

Sliding Door · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
n/a	`affected`	custom	Unavailable	3.3	`3.4` → `unaffected`

Shopstar!

Vendor: Out the Box
Product: Shopstar!
Platforms: Unknown
Default status: unaffected
Package: shopstar
Package collection: https://wordpress.org/themes/

Shopstar! · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
n/a	`affected`	custom	Unavailable	1.1.33	`1.1.34` → `unaffected`

Gridsby

Vendor: Modernthemesnet
Product: Gridsby
Platforms: Unknown
Default status: unaffected
Package: gridsby
Package collection: https://wordpress.org/themes/

Gridsby · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
n/a	`affected`	custom	Unavailable	1.3.0	None listed

HappenStance

Vendor: TT Themes
Product: HappenStance
Platforms: Unknown
Default status: unaffected
Package: happenstance
Package collection: https://wordpress.org/themes/

HappenStance · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
n/a	`affected`	custom	Unavailable	3.0.1	None listed

i-excel

Vendor: Marsian
Product: i-excel
Platforms: Unknown
Default status: unaffected
Package: i-excel
Package collection: https://wordpress.org/themes/

i-excel · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
n/a	`affected`	custom	Unavailable	1.7.9	None listed

Panoramic

Vendor: Out the Box
Product: Panoramic
Platforms: Unknown
Default status: unaffected
Package: panoramic
Package collection: https://wordpress.org/themes/

Panoramic · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
n/a	`affected`	custom	Unavailable	1.1.56	`1.1.57` → `unaffected`

Sensible WP

Vendor: Modernthemesnet
Product: Sensible WP
Platforms: Unknown
Default status: unaffected
Package: sensible-wp
Package collection: https://wordpress.org/themes/

Sensible WP · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
n/a	`affected`	custom	Unavailable	1.3.1	None listed