CVE-2024-4529

The Business Card WordPress plugin through 1.0.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions such as deleting card categories via CSRF attacks
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

cpe:2.3:a:esterox:business_card:1.0.0:*:*:*:*:wordpress:*:*

History

01 May 2025, 14:13

Type Values Removed Values Added
References () https://wpscan.com/vulnerability/082ff0b8-2ecd-4292-832d-0a79e1ba8cb3/ - () https://wpscan.com/vulnerability/082ff0b8-2ecd-4292-832d-0a79e1ba8cb3/ - Exploit, Third Party Advisory
CWE CWE-352
First Time Esterox
Esterox business Card
CPE cpe:2.3:a:esterox:business_card:1.0.0:*:*:*:*:wordpress:*:*

27 May 2024, 06:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-05-27 06:15

Updated : 2025-05-01 14:13


NVD link : CVE-2024-4529

Mitre link : CVE-2024-4529


JSON object : View

Products Affected

esterox

  • business_card
CWE
CWE-352

Cross-Site Request Forgery (CSRF)