CVE-2024-13838
CVSS 3.1 Score 3.8 of 10 (low)
Details
Published Mar 12, 2025
Updated: Apr 2, 2025
CWE ID 918
Summary
CVE-2024-13838: A serious vulnerability affects the Uncanny Automator plugin for WordPress. This issue allows authenticated attackers with Administrator-level access to execute Server-Side Request Forgeries (SSRF) via the 'call_webhook' method of the Automator_Send_Webhook class. SSRF attacks enable attackers to make web requests to arbitrary locations from the web application, potentially leading to the querying and modification of internal service information. All versions up to and including 6.2 are impacted.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.