CVE-2024-12279

Summary

CVE-2024-12279 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the WP Social AutoConnect plugin for WordPress. Versions up to and including 4.6.2 are impacted by this issue. Attackers can exploit this flaw by forging requests and tricking administrators into performing actions, such as clicking on malicious links. The vulnerability stems from missing or incorrect nonce validation on a function, leaving the plugin open to CSRF attacks and potentially allowing unauthenticated adversaries to inject malicious web scripts.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.