PT-2024-31571 · WordPress · Business Card Wordpress Plugin

Bob Matyas · CVE-2024-4532 · Published 2024-05-27 · Updated 2024-11-14

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions Business Card WordPress plugin versions prior to 1.0.1

Description The issue concerns a lack of CSRF checks in certain areas, allowing attackers to potentially manipulate logged-in users into performing unintended actions, such as deleting cards through CSRF attacks.

Recommendations For Business Card WordPress plugin versions prior to 1.0.1, update to version 1.0.1 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive functions that could be exploited via CSRF attacks until a patch is applied.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2024-4532

Affected Products

Business Card Wordpress Plugin

References · 5

• 🔥 https://wpscan.com/vulnerability/64cf5f95-bbf0-4c5f-867b-62f1b7f6a42e · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-4532 · Security Note
• https://osv.dev/vulnerability/CVE-2024-4532 · Vendor Advisory
• https://t.me/cvenotify/81071 · Telegram Post
• https://t.me/cvenotify/101720 · Telegram Post