CVE Catalog
CVE-2026-39619
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.14%
4th percentile - higher than 4% of all known CVEs
Summary
A Cross-Site Request Forgery (CSRF) vulnerability in the Busiprof WordPress plugin allows uploading a web shell to the server. An attacker can trick an administrator into performing unintended actions.
Risk Assessment
An attacker can gain remote access to the server, leading to full system compromise.
Recommendation
Update the Busiprof plugin to version later than 2.5.2. Implement CSRF protections.
Original NVD description (English source)
Cross-Site Request Forgery (CSRF) vulnerability in priyanshumittal Busiprof busiprof allows Upload a Web Shell to a Web Server.This issue affects Busiprof: from n/a through <= 2.5.2.