CVE-2024-11813

Summary

CVE-2024-11813 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Pulsating Chat Button plugin for WordPress. Versions up to and including 1.3.6 are susceptible to this issue. The root cause is insufficient nonce validation on the admin_chat_button_settings_page() function. Consequently, unauthenticated attackers can trick site administrators into making unwitting actions, leading to the updating of settings and the injection of malicious web scripts. This vulnerability poses a significant risk to WordPress sites using the Pulsating Chat Button plugin, necessitating an immediate update to a patched version.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.