CVE-2024-13520

Summary

CVE-2024-13520 is a vulnerability affecting the Gift Cards plugin for WordPress, specifically versions up to 4.4.6. This issue involves missing capability checks on the 'update_voucher_price', 'update_voucher_date', and 'update_voucher_note' functions, enabling unauthenticated attackers to modify the value, expiration date, and user note for any gift voucher, leading to unauthorized data modification or loss.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.