Cross-Site Request Forgery Vulnerability in WP Royal Bard Theme
CVE-2024-37490
4.3MEDIUM
Summary
The WP Royal Bard Theme has been identified with a Cross-Site Request Forgery (CSRF) vulnerability that can potentially allow attackers to perform unauthorized actions on behalf of an authenticated user. This flaw can be exploited in scenarios where certain actions are triggered without user consent, leading to significant security risks. It is essential for users of Bard Theme versions up to 2.210 to apply necessary patches and mitigate the impact of this vulnerability.
Affected Version(s)
Bard <= 2.210
References
CVSS V3.1
Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Dhabaleshwar Das (Patchstack Alliance)