Every CVE whose affected-product data names Esterox Business Card, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (5)
CVE-2024-5807 — CVSS 7.2 (high): The Business Card WordPress plugin through 1.0.0 does not prevent high privilege users like administrators from uploading malicious PHP…
CVE-2024-4531 — CVSS 7.1 (high): The Business Card WordPress plugin through 1.0.0 does not have CSRF checks in some places, which could allow attackers to make logged in…
CVE-2024-4532 — CVSS 6.4 (medium): The Business Card WordPress plugin through 1.0.0 does not have CSRF checks in some places, which could allow attackers to make logged in…
CVE-2024-4530 — CVSS 6.3 (medium): The Business Card WordPress plugin through 1.0.0 does not have CSRF checks in some places, which could allow attackers to make logged in…
CVE-2024-4529 — CVSS 5.0 (medium): The Business Card WordPress plugin through 1.0.0 does not have CSRF checks in some places, which could allow attackers to make logged in…