VYPR
← All advisories
High severity8.8NVD Advisory· Published Mar 26, 2025· Updated Jun 17, 2026

CVE-2024-13146

CVE-2024-13146

Description

The Booknetic WordPress plugin before 4.1.5 does not have CSRF check when creating Staff accounts, which could allow attackers to make logged in admin add arbitrary Staff members via a CSRF attack

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • WordPress/Bookneticcpe-rescue3 versions
    (expand)+ 2 more
    • (no CPE)
    • (no CPE)range: <4.1.5
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.