CVE-2024-2904: Extendthemes Calliope

High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability in Extend Themes Calliope.This issue affects Calliope: from n/a through 1.0.33.

Affected products

• Extendthemes Calliope: before 1.0.35 (fixed in 1.0.35)

Published 2024-03-26. Last modified 2026-06-17.