VULNERABILITY INTELLIGENCE

CVE-2024-52874

CVSS score8.8 HIGH

EPSS probability0.21%

CISA KEVNot currently listed

Published2025-05-22

Last modified2026-06-17

Description

The wp-affiliate-platform WordPress plugin before 6.5.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in user change them via a CSRF attack