CVE-2024-13601

Summary

CVE-2024-13601: The Majestic Support plugin for WordPress, versions up to 1.0.5, contains an Insecure Direct Object Reference vulnerability. This issue is due to the lack of validation on a user-controlled key within the 'exportusereraserequest' function. Consequently, authenticated attackers with Subscriber-level access or higher can exploit this flaw to export ticket data for any user, potentially leading to unauthorized access to sensitive information.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.