CVE-2024-12386

Summary

CVE-2024-12386 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the WP Abstracts plugin for WordPress. The flaw, present in all versions up to and including 2.7.3, allows unauthenticated attackers to delete arbitrary accounts. This occurs due to the lack of nonce validation on several functions, enabling malicious actors to trick site administrators into performing destructive actions by simply convincing them to click on a malicious link.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.