Easy Property Listings, CVE-2024-3163
- CVE, Research URL
- Home page URL
- Application
- Published on
- Sep 12, 2024
- Research Description
- The Easy Property Listings WordPress plugin before 3.5.4 does not have CSRF check when deleting contacts in bulk, which could allow attackers to make a logged in admin delete them via a CSRF attack
- Affected versions
-
max 3.5.4.
- Status
-
vulnerable