CVE-2024-13540

Summary

CVE-2024-13540 is a vulnerability affecting the WooODT Lite plugin for WordPress, specifically versions 2.5.1 and below. The issue stems from the /inc/bycwooodt_get_all_orders.php file, which is accessible to unauthenticated attackers. This exposure results in a publicly visible error message, revealing the full path of the web application. Although the information disclosed is not damaging on its own, an attacker would need to exploit another vulnerability to cause harm to an affected website.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.