CVE-2024-12557

Summary

CVE-2024-12557 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Transporters.io plugin for WordPress. Versions up to and including 2.0.84 are susceptible to this issue. The root cause is the lack of nonce validation on a specific function, allowing unauthenticated attackers to execute malicious web scripts. The attacker needs to trick a site administrator into performing a certain action, such as clicking on a link, to exploit the vulnerability. Successful exploitation could lead to unintended actions or data modifications. It is highly recommended that WordPress users update to the latest version of the Transporters.io plugin to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.