What’s Vulnerable › Vulnerabilities

CVE-2024-5807: Business Card <= 1.0.0 - Admin+ File Upload

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-07-30 · updated 2026-06-17

Description

The Business Card WordPress plugin through 1.0.0 does not prevent high privilege users like administrators from uploading malicious PHP files, which could allow them to run arbitrary code on servers hosting their site, even in MultiSite configurations.

Affected products

• Business Card: 1.0.0

References

• https://wpscan.com/vulnerability/badb16b5-8c06-4170-b605-ea7af8982c1f/
• https://wpscan.com/vulnerability/badb16b5-8c06-4170-b605-ea7af8982c1f/

Get alerted when CVE-2024-5807 or the next vulnerability affects your stack