CVE-2024-13773

Summary

CVE-2024-13773 is a vulnerability affecting the Civi- Job Board & Freelance Marketplace WordPress Theme plugin. This issue, present in all versions up to 2.1.4, allows unauthenticated attackers to access sensitive information due to hard-coded credentials. These credentials expose LinkedIn client and secret keys, putting user data at risk. Unauthorized parties can exploit this vulnerability to gain unauthorized access to LinkedIn accounts and potentially misuse the data. Users are urged to update to the latest version of the plugin as soon as possible to mitigate this exposure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.