Unrated severityNVD Advisory· Published Sep 12, 2024· Updated Sep 12, 2024
Easy Property Listings < 3.5.4 - Arbitrary Contact Deletion via CSRF
CVE-2024-3163
Description
The Easy Property Listings WordPress plugin before 3.5.4 does not have CSRF check when deleting contacts in bulk, which could allow attackers to make a logged in admin delete them via a CSRF attack
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2(expand)+ 1 more
- (no CPE)
- (no CPE)range: <3.5.4
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/f89c8654-5486-4939-880d-101f33d359c0/mitreexploitvdb-entrytechnical-description
News mentions
0No linked articles in our index yet.