CVE-2024-0512

Summary

CVE-2024-0512 is a newly identified vulnerability affecting the Royal Elementor Addons and Templates plugin for WordPress. The weakness lies in the lack of proper nonce validation on the add_to_wishlist function, which exists up to and including version 1.3.87. This issue allows unauthenticated attackers to manipulate user wishlists by sending forged requests. A site administrator unwittingly interacting with a crafted link can trigger the problem, enabling the attacker to add items to a targeted user's wishlist.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.