CVE-2024-13695

Summary

CVE-2024-13695 is a Server-Side Request Forgery vulnerability affecting the Enfold theme for WordPress. Versions up to and including 6.0.9 are vulnerable. This issue enables authenticated attackers, with Subscriber-level access and above, to manipulate web requests originating from the application. Consequently, attackers can access and modify information from internal services, posing a significant security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.