Launchinteractive vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Launchinteractive products: 1 record(s), with severity, exploitation and fixes.

Merge + Minify + Refresh 1

Exploited only (KEV) →

CVE-2026-24384 Medium · 5.4 CWE-352 Jan 22, 2026

WordPress Merge + Minify + Refresh plugin <= 2.14 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in launchinteractive Merge + Minify + Refresh merge-minify-refresh allows Cross Site Request Forgery.This issue affects Merge + Minify + Refresh: from n/a through <= 2.14.