CVE-2024-32794

Summary

CVE-2024-32794 denotes a Cross-Site Request Forgery (CSRF) vulnerability found in Paid Memberships Pro. This issue puts versions 2.12.1 and earlier at risk. A successful exploit could allow an attacker to force authenticated users to perform unwanted actions, potentially resulting in unauthorized modifications to their membership status or sensitive information disclosure. It is essential for users to update their Paid Memberships Pro plugin to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.