CVE-2024-13513

Summary

CVE-2024-13513 is a Sensitive Information Exposure vulnerability affecting the Oliver POS WooCommerce Point of Sale plugin for WordPress. Unauthenticated attackers can extract sensitive data, including the plugin's clientToken, from log files through the logging functionality. This token can be used to modify user account information, including emails and account types, and ultimately change passwords, leading to a complete site takeover. The vulnerability persists even after version 2.4.2.3, which disables logging, is installed, leaving existing log files still exposed.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.