CVE-2018-20972: Codeermeneer Companion Auto Update

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

The companion-auto-update plugin before 3.2.1 for WordPress has CSRF.

Affected products

• Codeermeneer Companion Auto Update: before 3.2.1 (fixed in 3.2.1)

Published 2019-08-16. Last modified 2026-06-17.