CVE-2024-0514

Summary

CVE-2024-0514 is a Cross-Site Request Forgery vulnerability affecting the Royal Elementor Addons and Templates plugin for WordPress. Versions up to and including 1.3.87 are at risk. The issue stems from inadequate nonce validation on the add_to_compare function, enabling unauthenticated attackers to add items to user compare lists. This vulnerability can be exploited if a site administrator unknowingly clicks on a malicious link.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.