CVE-2024-13339

Summary

CVE-2024-13339 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the DeBounce Email Validator plugin for WordPress. Versions up to 5.6.6 are impacted by this issue. The vulnerability stems from the absence or improper verification of nonce values on the 'debounce_email_validator' page. This weakness allows unauthenticated attackers to manipulate plugin settings and inject malicious web scripts by deceiving site administrators into performing specific actions, such as clicking on a malicious link.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.