launchinteractive

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

launchinteractive records in CISA KEV

No launchinteractive vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-19657 CVE-2026-24384 · GHSA-3w6g-qwm8-rq34

WordPress Merge + Minify + Refresh plugin <= 2.14 - Cross Site Request Forgery (CSRF) vulnerability

LOW 23

Cross-Site Request Forgery (CSRF) vulnerability in launchinteractive Merge + Minify + Refresh merge-minify-refresh allows Cross Site Request Forgery.This issue affects Merge + Minify + Refresh: from n/a through <= 2.14.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00116 Published 2026-01-22 No fix listed CWE-352

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0