CVE-2024-2843
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Summary
A vulnerability with the CVE ID CVE-2024-2843 has been identified in the WooCommerce Customers Manager WordPress plugin before version 30.1. This vulnerability does not implement CSRF (Cross-Site Request Forgery) checks in certain areas, potentially allowing attackers to exploit logged-in admin users and perform unauthorized deletions of users through CSRF attacks. The affected product is xYAWaa, a WordPress plugin for managing customer data. Remediation for this vulnerability involves updating the WooCommerce Customers Manager plugin to version 30.1 or newer. The potential danger posed by this vulnerability is considered medium, with an exploitability score of 2.8 and a base severity score of 6.5 according to CVSS:3.1 standards. The integrity impact is high, while confidentiality impact is none, and the attack vector is network-based with required user interaction.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions