CVE-2024-13336

Summary

CVE-2024-13336 is a vulnerability affecting the Disable Auto Updates plugin for WordPress. The issue lies in the plugin's failure to properly validate nonces on the 'disable-auto-updates' page, resulting in a Cross-Site Request Forgery (CSRF) weakness. This vulnerability allows unauthenticated attackers to manipulate site administrators into disabling all automatic updates through forged requests, potentially leaving WordPress sites open to outdated components and security risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.