WordPress Tax Rate Upload plugin <= 2.4.5 - CSRF leading to Cross Site Scripting (XSS) vulnerability

CVE-2024-31105

What is CVE-2024-31105?

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Adam Bowen Tax Rate Upload plugin, allowing reflected cross-site scripting (XSS) attacks. This weakness affects all versions from an unspecified release up to 2.4.5. Exploiting this vulnerability can enable attackers to send unauthorized commands to the web application, leading to potential data breaches or other malicious actions. Website administrators using this plugin should assess their installations and implement necessary security measures to mitigate the risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References