WordPress Busiprof Theme Cross-Site Request Forgery Vulnerability Allowing Web Shell Upload

Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability exists in the WordPress Busiprof theme, specifically in versions through 2.5.2. This vulnerability allows attackers to upload a web shell to the server.

Impact

Exploitation of this vulnerability could lead to unauthorized file uploads, including web shells, which could be executed on the server.

Added: Apr 8, 2026, 10:38 AM
Updated: Apr 8, 2026, 10:38 AM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
2.5
exploitability
6.2
remediation
0.0
relevance
5.2
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.