CVE-2024-13683
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Jan 24, 2025
Updated: Feb 5, 2025
CWE ID 352
Summary
CVE-2024-13683: A critical vulnerability affects the Automate Hub Free plugin for WordPress versions up to 1.7.0. This issue stems from insufficient nonce validation on the 'automate_hub' page, leading to a Cross-Site Request Forgery (CSRF) vulnerability. Unauthenticated attackers can potentially manipulate administrators into executing malicious actions, such as updating activation statuses, through specially crafted links.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.