CVE-2024-13437

Summary

CVE-2024-13437 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Book a Room plugin for WordPress. This issue arises due to inadequate nonce validation on the 'bookaroom_Settings' page, which allows unauthenticated attackers to manipulate plugin settings by tricking administrators into executing malicious requests. By exploiting this vulnerability, an attacker can modify booking options and potentially gain unauthorized access to sensitive information. It is crucial for WordPress users running the Book a Room plugin to upgrade to the latest version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.