7.2
Élevée
CVE-2024-5807 The Business Card WordPress plugin through 1.0.0 does not prevent high privilege users like administrators from…
Description
The Business Card WordPress plugin through 1.0.0 does not prevent high privilege users like administrators from uploading malicious PHP files, which could allow them to run arbitrary code on servers hosting their site, even in MultiSite configurations.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Business Card 1.0 | premières → 1.0.0 | Pas de correctif indiqué |
| business_card 1.0 | premières → 1.0.0 | Pas de correctif indiqué |
Autres CVE de Business Card
Les 5 CVE de Business Card →
CVE-2024-4531
The Business Card WordPress plugin through 1.0.0 does not have CSRF checks in some places, which could allow attackers…
7.1
Élevée
CVE-2024-4532
The Business Card WordPress plugin through 1.0.0 does not have CSRF checks in some places, which could allow attackers…
6.4
Moyenne
CVE-2024-4530
The Business Card WordPress plugin through 1.0.0 does not have CSRF checks in some places, which could allow attackers…
6.3
Moyenne
CVE-2024-4529
The Business Card WordPress plugin through 1.0.0 does not have CSRF checks in some places, which could allow attackers…
5.0
Moyenne