CVE-2026-39619 - Vulnerability Analysis

Overview

priyanshumittal Busiprof <= 2.5.2 contains a cross-site request forgery caused by lack of CSRF protection, letting attackers upload a web shell to the web server, exploit requires victim interaction.

Severity & Score

Impact

Attackers can upload a web shell, leading to remote code execution and full server compromise.

Mitigation

Update to a version later than 2.5.2 or apply CSRF protections.

References

• https://patchstack.com/database/Wordpress/Theme/busiprof/vulnerability/wordpress-busiprof-theme-2-5-2-cross-site-request-forgery-csrf-to-arbitrary-file-upload-vulnerability?_s_id=cve

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner