Skip to content
Sign in
4.3 Medium

CVE-2024-13405 The Apptivo Business Site CRM plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to,…

Description

The Apptivo Business Site CRM plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.3. This is due to missing or incorrect nonce validation on the 'awp_ip_deny' page. This makes it possible for unauthenticated attackers to block IP addresses via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

Affected products and versions

Product Affected versions Fixed in
Apptivo Business Site CRM 5.3 earliest → 5.3 No fix stated
Apptivo Business Site 5.3 earliest → 5.3 No fix stated

Other CVEs of Apptivo Business Site CRM

The 3 CVEs of Apptivo Business Site CRM →
CVE-2025-31909 Missing Authorization vulnerability in Apptivo Apptivo Business Site CRM apptivo-business-site allows Exploiting… 7.5 High CVE-2022-44582 Auth 4.8 Medium
Track this CVE