Medium severity4.3NVD Advisory· Published Sep 12, 2024· Updated Jun 17, 2026
CVE-2024-3163
CVE-2024-3163
Description
The Easy Property Listings WordPress plugin before 3.5.4 does not have CSRF check when deleting contacts in bulk, which could allow attackers to make a logged in admin delete them via a CSRF attack
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3<3.5.4+ 1 more
- (no CPE)range: <3.5.4
- (no CPE)
- cpe:2.3:a:realestateconnected:easy_property_listings:*:*:*:*:*:wordpress:*:*Range: <3.5.4
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/f89c8654-5486-4939-880d-101f33d359c0/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.