CVE-2024-0827

Summary

CVE-2024-0827 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Play.ht plugin for WordPress. Versions up to and including 3.6.4 are impacted. The issue stems from insufficient nonce validation on several plugin functions, allowing unauthenticated attackers to manipulate these functions through forged requests. Successful exploitation requires the attacker to trick a site administrator into performing a specific action, such as clicking on a malicious link.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.