CVE-2024-37274
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Jan 2, 2025
CWE ID 352
Summary
CVE-2024-37274 is a Cross-Site Request Forgery (CSRF) vulnerability affecting Freshlight Lab's WP Mobile Menu plugin. This issue enables an attacker to manipulate a user's session and execute unintended actions on their behalf. The vulnerability affects WP Mobile Menu versions from n/a to 2.8.4.3, putting a significant number of WordPress sites at risk. An attacker can exploit this flaw to modify user data or take other unwanted actions, highlighting the importance of patching affected installations promptly.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.