CVE-2024-8490 is a CSRF vulnerability in the PropertyHive WordPress plugin affecting all versions up to 2.0.19. The issue arises from missing or incorrect nonce validation on the 'save_account_details' function, enabling attackers to forge requests that modify administrator account details if an administrator is tricked into clicking a malicious link. This vulnerability allows unauthorized modification of critical account information without requiring prior authentication.

Successful exploitation can lead to unauthorized changes to an administrator's name, email address, and password, potentially resulting in full administrative account takeover. This compromises the confidentiality, integrity, and availability of the affected WordPress site.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, administrators should avoid clicking on untrusted links and consider implementing additional CSRF protections or monitoring for suspicious account changes.