VULNERABILITY INTELLIGENCE

CVE-2024-13146

CVSS score8.8 HIGH

EPSS probability0.24%

CISA KEVNot currently listed

Published2025-03-26

Last modified2026-06-17

Description

The Booknetic WordPress plugin before 4.1.5 does not have CSRF check when creating Staff accounts, which could allow attackers to make logged in admin add arbitrary Staff members via a CSRF attack