7.2
High
CVE-2024-5807 The Business Card WordPress plugin through 1.0.0 does not prevent high privilege users like administrators from…
Description
The Business Card WordPress plugin through 1.0.0 does not prevent high privilege users like administrators from uploading malicious PHP files, which could allow them to run arbitrary code on servers hosting their site, even in MultiSite configurations.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Business Card 1.0 | earliest → 1.0.0 | No fix stated |
| business_card 1.0 | earliest → 1.0.0 | No fix stated |
Other CVEs of Business Card
The 5 CVEs of Business Card →
CVE-2024-4531
The Business Card WordPress plugin through 1.0.0 does not have CSRF checks in some places, which could allow attackers…
7.1
High
CVE-2024-4532
The Business Card WordPress plugin through 1.0.0 does not have CSRF checks in some places, which could allow attackers…
6.4
Medium
CVE-2024-4530
The Business Card WordPress plugin through 1.0.0 does not have CSRF checks in some places, which could allow attackers…
6.3
Medium
CVE-2024-4529
The Business Card WordPress plugin through 1.0.0 does not have CSRF checks in some places, which could allow attackers…
5.0
Medium