PT-2024-31542 · WordPress · Business Card Wordpress Plugin

Bob Matyas · Published 2024-05-27 · Updated 2024-07-03 · CVE-2024-4529

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Business Card WordPress plugin versions prior to 1.0.1

Description The issue concerns a lack of CSRF checks in certain areas, allowing attackers to trick logged-in users into performing unintended actions, such as deleting card categories through CSRF attacks.

Recommendations For Business Card WordPress plugin versions prior to 1.0.1, update to version 1.0.1 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive functions that could be exploited via CSRF attacks until the update is applied.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2024-4529

Affected Products

Business Card Wordpress Plugin

References · 4

• 🔥 https://wpscan.com/vulnerability/082ff0b8-2ecd-4292-832d-0a79e1ba8cb3 · Exploit
• https://osv.dev/vulnerability/CVE-2024-4529 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-4529 · Security Note
• https://t.me/cvenotify/81068 · Telegram Post