CVE-2024-0512

Summary

CVE-2024-0512 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Royal Elementor Addons and Templates plugin for WordPress. Versions up to and including 1.3.87 are at risk due to insufficient nonce validation on the add_to_wishlist function. An attacker can exploit this flaw by tricking a site administrator into executing a malicious request, leading to unauthorized items being added to user wishlists. This issue poses a potential security risk, making it essential for users to update the plugin as soon as a patch is released.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.