CVE-2024-13516
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Jan 18, 2025
CWE ID 79
Summary
CVE-2024-13317 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the ShipWorks Connector for WooCommerce plugin for WordPress. Versions up to and including 5.2.5 are vulnerable. The issue arises due to inadequate nonce validation on the 'shipworks-wordpress' page, leading attackers to trick site administrators into executing a malicious request. Successful exploitation enables attackers to update the services username and password without authentication.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.