CVE-2024-13555

Summary

CVE-2024-13555 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the 1 Click WordPress Migration Plugin. This plugin, which is free for a limited time, is used in WordPress sites. The issue lies in the plugin's lack of proper nonce validation within the cancel_actions() function. An unauthenticated attacker can exploit this weakness to cancel a triggered backup by tricking an administrator into clicking a malicious link. This can potentially result in data loss or other security risks for the affected WordPress site.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.