CVE-2024-34810
Deferred Deferred - Pending Action

Cross-Site Request Forgery in Skyline WP

Publication date: 2026-06-17

Last updated on: 2026-06-17

Assigner: Patchstack

Description
Cross-Site request forgery (CSRF) vulnerability in Extend Themes Skyline WP allows Cross Site Request Forgery. This issue affects Skyline WP: from n/a through 1.0.10.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-06-17
Last Modified
2026-06-17
Generated
2026-07-08
AI Q&A
2026-06-17
EPSS Evaluated
2026-07-06
NVD
CVE-2024-34810
EUVD
EUVD-2024-55626

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
extend_themes skyline_wp to 1.0.10 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-352 The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2024-34810 is a Cross Site Request Forgery (CSRF) vulnerability affecting the WordPress Skyline WP Theme versions 1.0.10 and below.

This vulnerability requires user interaction, such as clicking a malicious link or visiting a crafted page, to be exploited.

A successful attack could force higher-privileged users to execute unwanted actions under their current authentication.

The issue has been patched in version 1.0.11.

Impact Analysis

This vulnerability can impact you by allowing attackers to trick authenticated users, especially those with higher privileges, into performing unwanted actions without their consent.

Such actions could compromise the integrity of your WordPress site by executing commands or changes that the user did not intend.

Exploitation requires user interaction, so the risk can be mitigated by cautious behavior and updating to the patched version.

Mitigation Strategies

The vulnerability in Skyline WP Theme versions 1.0.10 and below has been patched in version 1.0.11.

Users are advised to update the Skyline WP Theme to version 1.0.11 or later to mitigate the risk of this Cross Site Request Forgery (CSRF) vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2024-34810. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart