CVE-2024-51634

Summary

CVE-2024-51634 is a Cross-Site Request Forgery (CSRF) vulnerability affecting Webriti Custom Login, a WordPress plugin from Webriti. This issue enables attackers to inject malicious code via Reflected XSS (Cross-Site Scripting) attacks. The vulnerability impacts Webriti Custom Login versions from n/a through 0.3, putting potentially numerous websites using this plugin at risk. Successful exploitation may lead to unauthorized access, data theft, or site defacement. Users are strongly advised to update their Webriti Custom Login plugin as soon as a patch is released.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.