← back
CVE-2024-4530

Business Card <= 1.0.0 - Category Edit via CSRF

CVSS 6.3 MEDIUMEPSS 0.2%
The Business Card WordPress plugin through 1.0.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions such as editing card categories via CSRF attacks
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Affected products
Unknown · Business Card

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →