CVE-2024-13888

Summary

CVE-2024-13888 is a newly discovered vulnerability affecting the WPMobile.App plugin for WordPress. The issue lies in the plugin's failure to adequately validate redirect URLs provided through the 'redirect' parameter. An attacker can exploit this weakness by manipulating the redirect link, potentially steering unsuspecting users to malicious websites. This vulnerability poses a significant risk, as it does not require authentication for an attack to be successful. All versions of the plugin up to, and including, 11.56 are reportedly impacted.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.