CVE-2024-11341

Summary

CVE-2024-11341 is a vulnerability affecting the Simple Redirection plugin for WordPress. The issue, which impacts all versions up to 1.5, arises from inadequate nonce validation on the settings_page() function. Consequently, unauthenticated attackers can execute Cross-Site Request Forgery (CSRF) attacks. By fooling site administrators into executing a malicious action, such as clicking on a link, attackers can manipulate the plugin's settings, leading to the redirection of all site visitors to malicious pages.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.