CVE-2024-13820

Summary

CVE-2024-13820 is a Sensitive Information Exposure vulnerability affecting the Melhor Envio plugin for WordPress. The issue lies in the 'run' function, which makes use of a hardcoded hash. This weakness allows unauthenticated attackers to gain access to sensitive data, including environment information, plugin tokens, shipping configurations, and restricted vendor details. The vulnerability holds risk for all WordPress installations using the Melhor Envio plugin up to and including version 2.15.9. It is highly recommended that users update to the latest available version to mitigate this exposure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.