Cross-Site Request Forgery (CSRF) (CWE-352)
The wp-affiliate-platform WordPress plugin before 6.5.2 does not have CSRF check in place when deleting affiliates, which could allow attackers to make a logged in user change delete them via a CSRF attack
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
NVD published the first details for CVE-2024-5285
Feedly found the first article mentioning CVE-2024-5285. See article
Feedly estimated the CVSS score as HIGH
EPSS Score was set to: 0.04% (Percentile: 9.4%)
A CVSS base score of 5.5 has been assigned.