Cross-Site Request Forgery Vulnerability in WP Royal Bard Theme
CVE-2024-37490

4.3MEDIUM

Key Information:

Vendor

WordPress
Status
Bard
Vendor
CVE Published:
2 January 2025

What is CVE-2024-37490?

The WP Royal Bard Theme has been identified with a Cross-Site Request Forgery (CSRF) vulnerability that can potentially allow attackers to perform unauthorized actions on behalf of an authenticated user. This flaw can be exploited in scenarios where certain actions are triggered without user consent, leading to significant security risks. It is essential for users of Bard Theme versions up to 2.210 to apply necessary patches and mitigate the impact of this vulnerability.

Affected Version(s)

Bard <= 2.210

References

https://patchstack.com/database/wordpress/theme/bard/vuln...
vdb-entry

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dhabaleshwar Das (Patchstack Alliance)
.