CVE-2024-4532mediumCWE-352

CVE-2024-4532: medium-severity vulnerability in Business Card

Business Card <= 1.0.0 - Arbitrary Card Deletion via CSRF

Published · Updated

Follow this CVE+ Monitor Business Card

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.4epss 0.3%
The Business Card WordPress plugin through 1.0.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions such as deleting cards via CSRF attacks
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L
Affected products
Unknown · Business Card
Related CVEs — Business Card

In the same product, most dangerous first.

CVE-2024-5807HIGHBusiness Card <= 1.0.0 - Admin+ File UploadEPSS 0.6%CVE-2024-4531HIGHBusiness Card <= 1.0.0 - Card Edit via CSRFEPSS 0.3%CVE-2024-4530MEDIUMBusiness Card <= 1.0.0 - Category Edit via CSRFEPSS 0.2%CVE-2024-4529MEDIUMBusiness Card <= 1.0.0 - Category Deletion via CSRFEPSS 0.2%