CVE-2024-1909

Summary

CVE-2024-1909: A critical vulnerability has been identified in the Categorify plugin for WordPress, affecting versions up to 1.0.7.4. This issue stems from insufficient nonce validation on the function categorifyAjaxRenameCategory. As a result, unauthenticated attackers can exploit this flaw through Cross-Site Request Forgery attacks. To execute the attack, they need to trick a site administrator into performing an action like clicking a link, enabling them to rename WordPress categories unintendedly. This vulnerability poses a significant risk and requires urgent patching to mitigate the threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.